fix(widgets): link card lazy class + product paginate sanitize

Mark bookmark/friend link avatars with aksrt-lazy; clamp product list paginate enum to none|ajax|number on save.
2026-07-21 13:55:16 +08:00
parent 93833ad381
commit 5dd94bf246
2 changed files with 2 additions and 2 deletions
@@ -387,7 +387,7 @@ class WidgetProductList extends \WP_Widget {
 			'discount_ids' => sanitize_text_field((string) ($new_instance['discount_ids'] ?? '')),
 			'exclude_cat'  => !empty($new_instance['exclude_cat']) ? 1 : 0,
 			'style'        => sanitize_key((string) ($new_instance['style'] ?? 'default')),
-			'paginate'     => sanitize_key((string) ($new_instance['paginate'] ?? 'ajax')),
+			'paginate'     => in_array(sanitize_key((string) ($new_instance['paginate'] ?? 'ajax')), ['none', 'ajax', 'number'], true) ? sanitize_key((string) ($new_instance['paginate'] ?? 'ajax')) : 'ajax',
 		];
 	}
 }