<form method="POST">
    <h3>Editing: abstract-wc-settings-api.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php
/**
 * Abstract Settings API Class
 *
 * Admin Settings API used by Integrations, Shipping Methods, and Payment Gateways.
 *
 * @package  WooCommerce\Abstracts
 */

defined( 'ABSPATH' ) || exit;

use Automattic\WooCommerce\Internal\Utilities\HtmlSanitizer;

/**
 * WC_Settings_API class.
 */
abstract class WC_Settings_API {

	/**
	 * The plugin ID. Used for option names.
	 *
	 * @var string
	 */
	public $plugin_id = 'woocommerce_';

	/**
	 * ID of the class extending the settings API. Used in option names.
	 *
	 * @var string
	 */
	public $id = '';

	/**
	 * Validation errors.
	 *
	 * @var array of strings
	 */
	public $errors = array();

	/**
	 * Setting values.
	 *
	 * @var array
	 */
	public $settings = array();

	/**
	 * Form option fields.
	 *
	 * @var array
	 */
	public $form_fields = array();

	/**
	 * The posted settings data. When empty, $_POST data will be used.
	 *
	 * @var array
	 */
	protected $data = array();

	/**
	 * Get the form fields after they are initialized.
	 *
	 * @return array of options
	 */
	public function get_form_fields() {
		return apply_filters( 'woocommerce_settings_api_form_fields_' . $this-&gt;id, array_map( array( $this, 'set_defaults' ), $this-&gt;form_fields ) );
	}

	/**
	 * Set default required properties for each field.
	 *
	 * @param array $field Setting field array.
	 * @return array
	 */
	protected function set_defaults( $field ) {
		if ( ! isset( $field['default'] ) ) {
			$field['default'] = '';
		}
		return $field;
	}

	/**
	 * Output the admin options table.
	 */
	public function admin_options() {
		echo '&lt;table class=&quot;form-table&quot;&gt;' . $this-&gt;generate_settings_html( $this-&gt;get_form_fields(), false ) . '&lt;/table&gt;'; // WPCS: XSS ok.
	}

	/**
	 * Initialise settings form fields.
	 *
	 * Add an array of fields to be displayed on the gateway's settings screen.
	 *
	 * @since  1.0.0
	 */
	public function init_form_fields() {}

	/**
	 * Return the name of the option in the WP DB.
	 *
	 * @since 2.6.0
	 * @return string
	 */
	public function get_option_key() {
		return $this-&gt;plugin_id . $this-&gt;id . '_settings';
	}

	/**
	 * Get a fields type. Defaults to &quot;text&quot; if not set.
	 *
	 * @param  array $field Field key.
	 * @return string
	 */
	public function get_field_type( $field ) {
		return empty( $field['type'] ) ? 'text' : $field['type'];
	}

	/**
	 * Get a fields default value. Defaults to &quot;&quot; if not set.
	 *
	 * @param  array $field Field key.
	 * @return string
	 */
	public function get_field_default( $field ) {
		return empty( $field['default'] ) ? '' : $field['default'];
	}

	/**
	 * Get a field's posted and validated value.
	 *
	 * @param string $key Field key.
	 * @param array  $field Field array.
	 * @param array  $post_data Posted data.
	 * @return string
	 */
	public function get_field_value( $key, $field, $post_data = array() ) {
		$type      = $this-&gt;get_field_type( $field );
		$field_key = $this-&gt;get_field_key( $key );
		$post_data = empty( $post_data ) ? $_POST : $post_data; // WPCS: CSRF ok, input var ok.
		$value     = isset( $post_data[ $field_key ] ) ? $post_data[ $field_key ] : null;

		if ( isset( $field['sanitize_callback'] ) &amp;&amp; is_callable( $field['sanitize_callback'] ) ) {
			return call_user_func( $field['sanitize_callback'], $value );
		}

		// Look for a validate_FIELDID_field method for special handling.
		if ( is_callable( array( $this, 'validate_' . $key . '_field' ) ) ) {
			return $this-&gt;{'validate_' . $key . '_field'}( $key, $value );
		}

		// Look for a validate_FIELDTYPE_field method.
		if ( is_callable( array( $this, 'validate_' . $type . '_field' ) ) ) {
			return $this-&gt;{'validate_' . $type . '_field'}( $key, $value );
		}

		// Fallback to text.
		return $this-&gt;validate_text_field( $key, $value );
	}

	/**
	 * Sets the POSTed data. This method can be used to set specific data, instead of taking it from the $_POST array.
	 *
	 * @param array $data Posted data.
	 */
	public function set_post_data( $data = array() ) {
		$this-&gt;data = $data;
	}

	/**
	 * Returns the POSTed data, to be used to save the settings.
	 *
	 * @return array
	 */
	public function get_post_data() {
		if ( ! empty( $this-&gt;data ) &amp;&amp; is_array( $this-&gt;data ) ) {
			return $this-&gt;data;
		}
		return $_POST; // WPCS: CSRF ok, input var ok.
	}

	/**
	 * Update a single option.
	 *
	 * @since 3.4.0
	 * @param string $key Option key.
	 * @param mixed  $value Value to set.
	 * @return bool was anything saved?
	 */
	public function update_option( $key, $value = '' ) {
		if ( empty( $this-&gt;settings ) ) {
			$this-&gt;init_settings();
		}

		$this-&gt;settings[ $key ] = $value;

		return update_option( $this-&gt;get_option_key(), apply_filters( 'woocommerce_settings_api_sanitized_fields_' . $this-&gt;id, $this-&gt;settings ), 'yes' );
	}

	/**
	 * Processes and saves options.
	 * If there is an error thrown, will continue to save and validate fields, but will leave the erroring field out.
	 *
	 * @return bool was anything saved?
	 */
	public function process_admin_options() {
		$this-&gt;init_settings();

		$post_data = $this-&gt;get_post_data();

		foreach ( $this-&gt;get_form_fields() as $key =&gt; $field ) {
			if ( 'title' !== $this-&gt;get_field_type( $field ) ) {
				try {
					$this-&gt;settings[ $key ] = $this-&gt;get_field_value( $key, $field, $post_data );
					if ( 'select' === $field['type'] || 'checkbox' === $field['type'] ) {
						/**
						 * Notify that a non-option setting has been updated.
						 *
						 * @since 7.8.0
						 */
						do_action(
							'woocommerce_update_non_option_setting',
							array(
								'id'    =&gt; $key,
								'type'  =&gt; $field['type'],
								'value' =&gt; $this-&gt;settings[ $key ],
							)
						);
					}
				} catch ( Exception $e ) {
					$this-&gt;add_error( $e-&gt;getMessage() );
				}
			}
		}

		$option_key = $this-&gt;get_option_key();
		do_action( 'woocommerce_update_option', array( 'id' =&gt; $option_key ) ); // phpcs:ignore WooCommerce.Commenting.CommentHooks.MissingHookComment
		return update_option( $option_key, apply_filters( 'woocommerce_settings_api_sanitized_fields_' . $this-&gt;id, $this-&gt;settings ), 'yes' ); // phpcs:ignore WooCommerce.Commenting.CommentHooks.MissingHookComment
	}

	/**
	 * Add an error message for display in admin on save.
	 *
	 * @param string $error Error message.
	 */
	public function add_error( $error ) {
		$this-&gt;errors[] = $error;
	}

	/**
	 * Get admin error messages.
	 */
	public function get_errors() {
		return $this-&gt;errors;
	}

	/**
	 * Display admin error messages.
	 */
	public function display_errors() {
		if ( $this-&gt;get_errors() ) {
			echo '&lt;div id=&quot;woocommerce_errors&quot; class=&quot;error notice is-dismissible&quot;&gt;';
			foreach ( $this-&gt;get_errors() as $error ) {
				echo '&lt;p&gt;' . wp_kses_post( $error ) . '&lt;/p&gt;';
			}
			echo '&lt;/div&gt;';
		}
	}

	/**
	 * Initialise Settings.
	 *
	 * Store all settings in a single database entry
	 * and make sure the $settings array is either the default
	 * or the settings stored in the database.
	 *
	 * @since 1.0.0
	 * @uses get_option(), add_option()
	 */
	public function init_settings() {
		$this-&gt;settings = get_option( $this-&gt;get_option_key(), null );

		// If there are no settings defined, use defaults.
		if ( ! is_array( $this-&gt;settings ) ) {
			$form_fields    = $this-&gt;get_form_fields();
			$this-&gt;settings = array_merge( array_fill_keys( array_keys( $form_fields ), '' ), wp_list_pluck( $form_fields, 'default' ) );
		}
	}

	/**
	 * Get option from DB.
	 *
	 * Gets an option from the settings API, using defaults if necessary to prevent undefined notices.
	 *
	 * @param  string $key Option key.
	 * @param  mixed  $empty_value Value when empty.
	 * @return string The value specified for the option or a default value for the option.
	 */
	public function get_option( $key, $empty_value = null ) {
		if ( empty( $this-&gt;settings ) ) {
			$this-&gt;init_settings();
		}

		// Get option default if unset.
		if ( ! isset( $this-&gt;settings[ $key ] ) ) {
			$form_fields            = $this-&gt;get_form_fields();
			$this-&gt;settings[ $key ] = isset( $form_fields[ $key ] ) ? $this-&gt;get_field_default( $form_fields[ $key ] ) : '';
		}

		if ( ! is_null( $empty_value ) &amp;&amp; '' === $this-&gt;settings[ $key ] ) {
			$this-&gt;settings[ $key ] = $empty_value;
		}

		return $this-&gt;settings[ $key ];
	}

	/**
	 * Prefix key for settings.
	 *
	 * @param  string $key Field key.
	 * @return string
	 */
	public function get_field_key( $key ) {
		return $this-&gt;plugin_id . $this-&gt;id . '_' . $key;
	}

	/**
	 * Generate Settings HTML.
	 *
	 * Generate the HTML for the fields on the &quot;settings&quot; screen.
	 *
	 * @param array $form_fields (default: array()) Array of form fields.
	 * @param bool  $echo Echo or return.
	 * @return string the html for the settings
	 * @since  1.0.0
	 * @uses   method_exists()
	 */
	public function generate_settings_html( $form_fields = array(), $echo = true ) {
		if ( empty( $form_fields ) ) {
			$form_fields = $this-&gt;get_form_fields();
		}

		$html = '';
		foreach ( $form_fields as $k =&gt; $v ) {
			$type = $this-&gt;get_field_type( $v );

			if ( method_exists( $this, 'generate_' . $type . '_html' ) ) {
				$html .= $this-&gt;{'generate_' . $type . '_html'}( $k, $v );
			} elseif ( has_filter( 'woocommerce_generate_' . $type . '_html' ) ) {
				/**
				 * Allow the generation of custom field types on the settings screen.
				 *
				 * The dynamic portion of the hook name refers to the slug of the custom field type.
				 * For instance, to introduce a new field type `fancy_lazy_dropdown` you would use
				 * the hook `woocommerce_generate_fancy_lazy_dropdown_html`.
				 *
				 * @since 6.5.0
				 *
				 * @param string $field_html The markup of the field being generated (initiated as an empty string).
				 * @param string $key The key of the field.
				 * @param array  $data The attributes of the field as an associative array.
				 * @param object $wc_settings The current WC_Settings_API object.
				 */
				$html .= apply_filters( 'woocommerce_generate_' . $type . '_html', '', $k, $v, $this );
			} else {
				$html .= $this-&gt;generate_text_html( $k, $v );
			}
		}

		if ( $echo ) {
			echo $html; // WPCS: XSS ok.
		} else {
			return $html;
		}
	}

	/**
	 * Get HTML for tooltips.
	 *
	 * @param  array $data Data for the tooltip.
	 * @return string
	 */
	public function get_tooltip_html( $data ) {
		if ( true === $data['desc_tip'] ) {
			$tip = $data['description'];
		} elseif ( ! empty( $data['desc_tip'] ) ) {
			$tip = $data['desc_tip'];
		} else {
			$tip = '';
		}

		return $tip ? wc_help_tip( $tip, true ) : '';
	}

	/**
	 * Get HTML for descriptions.
	 *
	 * @param  array $data Data for the description.
	 * @return string
	 */
	public function get_description_html( $data ) {
		if ( true === $data['desc_tip'] ) {
			$description = '';
		} elseif ( ! empty( $data['desc_tip'] ) ) {
			$description = $data['description'];
		} elseif ( ! empty( $data['description'] ) ) {
			$description = $data['description'];
		} else {
			$description = '';
		}

		return $description ? '&lt;p class=&quot;description&quot;&gt;' . wp_kses_post( $description ) . '&lt;/p&gt;' . &quot;\n&quot; : '';
	}

	/**
	 * Get custom attributes.
	 *
	 * @param  array $data Field data.
	 * @return string
	 */
	public function get_custom_attribute_html( $data ) {
		$custom_attributes = array();

		if ( ! empty( $data['custom_attributes'] ) &amp;&amp; is_array( $data['custom_attributes'] ) ) {
			foreach ( $data['custom_attributes'] as $attribute =&gt; $attribute_value ) {
				$custom_attributes[] = esc_attr( $attribute ) . '=&quot;' . esc_attr( $attribute_value ) . '&quot;';
			}
		}

		return implode( ' ', $custom_attributes );
	}

	/**
	 * Generate Text Input HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_text_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
		);

		$data = wp_parse_args( $data, $defaults );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;input class=&quot;input-text regular-input &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; type=&quot;&lt;?php echo esc_attr( $data['type'] ); ?&gt;&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; value=&quot;&lt;?php echo esc_attr( $this-&gt;get_option( $key ) ); ?&gt;&quot; placeholder=&quot;&lt;?php echo esc_attr( $data['placeholder'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt; /&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generates HTML for the 'safe_text' input type (mostly used for gateway-related settings).
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @return string
	 *
	 * @since 7.6.0
	 */
	public function generate_safe_text_html( $key, $data ) {
		$data['type'] = 'text';
		return $this-&gt;generate_text_html( $key, $data );
	}

	/**
	 * Generate Price Input HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_price_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
		);

		$data = wp_parse_args( $data, $defaults );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;input class=&quot;wc_input_price input-text regular-input &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; type=&quot;text&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; value=&quot;&lt;?php echo esc_attr( wc_format_localized_price( $this-&gt;get_option( $key ) ) ); ?&gt;&quot; placeholder=&quot;&lt;?php echo esc_attr( $data['placeholder'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt; /&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Decimal Input HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_decimal_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
		);

		$data = wp_parse_args( $data, $defaults );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;input class=&quot;wc_input_decimal input-text regular-input &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; type=&quot;text&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; value=&quot;&lt;?php echo esc_attr( wc_format_localized_decimal( $this-&gt;get_option( $key ) ) ); ?&gt;&quot; placeholder=&quot;&lt;?php echo esc_attr( $data['placeholder'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt; /&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Password Input HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_password_html( $key, $data ) {
		$data['type'] = 'password';
		return $this-&gt;generate_text_html( $key, $data );
	}

	/**
	 * Generate Color Picker Input HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_color_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
		);

		$data = wp_parse_args( $data, $defaults );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;span class=&quot;colorpickpreview&quot; style=&quot;background:&lt;?php echo esc_attr( $this-&gt;get_option( $key ) ); ?&gt;;&quot;&gt;&amp;nbsp;&lt;/span&gt;
					&lt;input class=&quot;colorpick &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; type=&quot;text&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; value=&quot;&lt;?php echo esc_attr( $this-&gt;get_option( $key ) ); ?&gt;&quot; placeholder=&quot;&lt;?php echo esc_attr( $data['placeholder'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt; /&gt;
					&lt;div id=&quot;colorPickerDiv_&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; class=&quot;colorpickdiv&quot; style=&quot;z-index: 100; background: #eee; border: 1px solid #ccc; position: absolute; display: none;&quot;&gt;&lt;/div&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Textarea HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_textarea_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
		);

		$data = wp_parse_args( $data, $defaults );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;textarea rows=&quot;3&quot; cols=&quot;20&quot; class=&quot;input-text wide-input &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; type=&quot;&lt;?php echo esc_attr( $data['type'] ); ?&gt;&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; placeholder=&quot;&lt;?php echo esc_attr( $data['placeholder'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt;&gt;&lt;?php echo esc_textarea( $this-&gt;get_option( $key ) ); ?&gt;&lt;/textarea&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Checkbox HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_checkbox_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'label'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
		);

		$data = wp_parse_args( $data, $defaults );

		if ( ! $data['label'] ) {
			$data['label'] = $data['title'];
		}

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;
					&lt;input &lt;?php disabled( $data['disabled'], true ); ?&gt; class=&quot;&lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; type=&quot;checkbox&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; value=&quot;1&quot; &lt;?php checked( $this-&gt;get_option( $key ), 'yes' ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt; /&gt; &lt;?php echo wp_kses_post( $data['label'] ); ?&gt;&lt;/label&gt;&lt;br/&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Select HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_select_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
			'options'           =&gt; array(),
		);

		$data  = wp_parse_args( $data, $defaults );
		$value = $this-&gt;get_option( $key );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;select class=&quot;select &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt;&gt;
						&lt;?php foreach ( (array) $data['options'] as $option_key =&gt; $option_value ) : ?&gt;
							&lt;?php if ( is_array( $option_value ) ) : ?&gt;
								&lt;optgroup label=&quot;&lt;?php echo esc_attr( $option_key ); ?&gt;&quot;&gt;
									&lt;?php foreach ( $option_value as $option_key_inner =&gt; $option_value_inner ) : ?&gt;
										&lt;option value=&quot;&lt;?php echo esc_attr( $option_key_inner ); ?&gt;&quot; &lt;?php selected( (string) $option_key_inner, esc_attr( $value ) ); ?&gt;&gt;&lt;?php echo esc_html( $option_value_inner ); ?&gt;&lt;/option&gt;
									&lt;?php endforeach; ?&gt;
								&lt;/optgroup&gt;
							&lt;?php else : ?&gt;
								&lt;option value=&quot;&lt;?php echo esc_attr( $option_key ); ?&gt;&quot; &lt;?php selected( (string) $option_key, esc_attr( $value ) ); ?&gt;&gt;&lt;?php echo esc_html( $option_value ); ?&gt;&lt;/option&gt;
							&lt;?php endif; ?&gt;
						&lt;?php endforeach; ?&gt;
					&lt;/select&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Multiselect HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_multiselect_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title'             =&gt; '',
			'disabled'          =&gt; false,
			'class'             =&gt; '',
			'css'               =&gt; '',
			'placeholder'       =&gt; '',
			'type'              =&gt; 'text',
			'desc_tip'          =&gt; false,
			'description'       =&gt; '',
			'custom_attributes' =&gt; array(),
			'select_buttons'    =&gt; false,
			'options'           =&gt; array(),
		);

		$data  = wp_parse_args( $data, $defaults );
		$value = (array) $this-&gt;get_option( $key, array() );

		ob_start();
		?&gt;
		&lt;tr valign=&quot;top&quot;&gt;
			&lt;th scope=&quot;row&quot; class=&quot;titledesc&quot;&gt;
				&lt;label for=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt; &lt;?php echo $this-&gt;get_tooltip_html( $data ); // WPCS: XSS ok. ?&gt;&lt;/label&gt;
			&lt;/th&gt;
			&lt;td class=&quot;forminp&quot;&gt;
				&lt;fieldset&gt;
					&lt;legend class=&quot;screen-reader-text&quot;&gt;&lt;span&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/span&gt;&lt;/legend&gt;
					&lt;select multiple=&quot;multiple&quot; class=&quot;multiselect &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; name=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;[]&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot; style=&quot;&lt;?php echo esc_attr( $data['css'] ); ?&gt;&quot; &lt;?php disabled( $data['disabled'], true ); ?&gt; &lt;?php echo $this-&gt;get_custom_attribute_html( $data ); // WPCS: XSS ok. ?&gt;&gt;
						&lt;?php foreach ( (array) $data['options'] as $option_key =&gt; $option_value ) : ?&gt;
							&lt;?php if ( is_array( $option_value ) ) : ?&gt;
								&lt;optgroup label=&quot;&lt;?php echo esc_attr( $option_key ); ?&gt;&quot;&gt;
									&lt;?php foreach ( $option_value as $option_key_inner =&gt; $option_value_inner ) : ?&gt;
										&lt;option value=&quot;&lt;?php echo esc_attr( $option_key_inner ); ?&gt;&quot; &lt;?php selected( in_array( (string) $option_key_inner, $value, true ), true ); ?&gt;&gt;&lt;?php echo esc_html( $option_value_inner ); ?&gt;&lt;/option&gt;
									&lt;?php endforeach; ?&gt;
								&lt;/optgroup&gt;
							&lt;?php else : ?&gt;
								&lt;option value=&quot;&lt;?php echo esc_attr( $option_key ); ?&gt;&quot; &lt;?php selected( in_array( (string) $option_key, $value, true ), true ); ?&gt;&gt;&lt;?php echo esc_html( $option_value ); ?&gt;&lt;/option&gt;
							&lt;?php endif; ?&gt;
						&lt;?php endforeach; ?&gt;
					&lt;/select&gt;
					&lt;?php echo $this-&gt;get_description_html( $data ); // WPCS: XSS ok. ?&gt;
					&lt;?php if ( $data['select_buttons'] ) : ?&gt;
						&lt;br/&gt;&lt;a class=&quot;select_all button&quot; href=&quot;#&quot;&gt;&lt;?php esc_html_e( 'Select all', 'woocommerce' ); ?&gt;&lt;/a&gt; &lt;a class=&quot;select_none button&quot; href=&quot;#&quot;&gt;&lt;?php esc_html_e( 'Select none', 'woocommerce' ); ?&gt;&lt;/a&gt;
					&lt;?php endif; ?&gt;
				&lt;/fieldset&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Generate Title HTML.
	 *
	 * @param string $key Field key.
	 * @param array  $data Field data.
	 * @since  1.0.0
	 * @return string
	 */
	public function generate_title_html( $key, $data ) {
		$field_key = $this-&gt;get_field_key( $key );
		$defaults  = array(
			'title' =&gt; '',
			'class' =&gt; '',
		);

		$data = wp_parse_args( $data, $defaults );

		ob_start();
		?&gt;
			&lt;/table&gt;
			&lt;h3 class=&quot;wc-settings-sub-title &lt;?php echo esc_attr( $data['class'] ); ?&gt;&quot; id=&quot;&lt;?php echo esc_attr( $field_key ); ?&gt;&quot;&gt;&lt;?php echo wp_kses_post( $data['title'] ); ?&gt;&lt;/h3&gt;
			&lt;?php if ( ! empty( $data['description'] ) ) : ?&gt;
				&lt;p&gt;&lt;?php echo wp_kses_post( $data['description'] ); ?&gt;&lt;/p&gt;
			&lt;?php endif; ?&gt;
			&lt;table class=&quot;form-table&quot;&gt;
		&lt;?php

		return ob_get_clean();
	}

	/**
	 * Validate Text Field.
	 *
	 * Make sure the data is escaped correctly, etc.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_text_field( $key, $value ) {
		$value = is_null( $value ) ? '' : $value;
		return wp_kses_post( trim( stripslashes( $value ) ) );
	}

	/**
	 * Sanitize 'Safe Text' fields.
	 *
	 * These fields are similar to regular text fields, but a much  smaller set of HTML tags are allowed. By default,
	 * this means `&lt;br&gt;`, `&lt;img&gt;`, `&lt;p&gt;` and `&lt;span&gt;` tags.
	 *
	 * Note: this is a sanitization method, rather than a validation method (the name is due to some historic naming
	 * choices).
	 *
	 * @param  string $key   Field key (currently unused).
	 * @param  string $value Posted Value.
	 *
	 * @return string
	 */
	public function validate_safe_text_field( string $key, ?string $value ): string {
		return wc_get_container()-&gt;get( HtmlSanitizer::class )-&gt;sanitize( (string) $value, HtmlSanitizer::LOW_HTML_BALANCED_TAGS_NO_LINKS );
	}

	/**
	 * Validate Price Field.
	 *
	 * Make sure the data is escaped correctly, etc.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_price_field( $key, $value ) {
		$value = is_null( $value ) ? '' : $value;
		return ( '' === $value ) ? '' : wc_format_decimal( trim( stripslashes( $value ) ) );
	}

	/**
	 * Validate Decimal Field.
	 *
	 * Make sure the data is escaped correctly, etc.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_decimal_field( $key, $value ) {
		$value = is_null( $value ) ? '' : $value;
		return ( '' === $value ) ? '' : wc_format_decimal( trim( stripslashes( $value ) ) );
	}

	/**
	 * Validate Password Field. No input sanitization is used to avoid corrupting passwords.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_password_field( $key, $value ) {
		$value = is_null( $value ) ? '' : $value;
		return trim( stripslashes( $value ) );
	}

	/**
	 * Validate Textarea Field.
	 *
	 * @since 9.0.0 No longer allows storing IFRAME, which was allowed for &quot;ShareThis&quot; integration no longer found in core.
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_textarea_field( $key, $value ) {
		$value = is_null( $value ) ? '' : $value;
		return wp_kses_post( trim( stripslashes( $value ) ) );
	}

	/**
	 * Validate Checkbox Field.
	 *
	 * If not set, return &quot;no&quot;, otherwise return &quot;yes&quot;.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_checkbox_field( $key, $value ) {
		return ! is_null( $value ) ? 'yes' : 'no';
	}

	/**
	 * Validate Select Field.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string
	 */
	public function validate_select_field( $key, $value ) {
		$value = is_null( $value ) ? '' : $value;
		return wc_clean( stripslashes( $value ) );
	}

	/**
	 * Validate Multiselect Field.
	 *
	 * @param  string $key Field key.
	 * @param  string $value Posted Value.
	 * @return string|array
	 */
	public function validate_multiselect_field( $key, $value ) {
		return is_array( $value ) ? array_map( 'wc_clean', array_map( 'stripslashes', $value ) ) : '';
	}

	/**
	 * Validate the data on the &quot;Settings&quot; form.
	 *
	 * @deprecated 2.6.0 No longer used.
	 * @param array $form_fields Array of fields.
	 */
	public function validate_settings_fields( $form_fields = array() ) {
		wc_deprecated_function( 'validate_settings_fields', '2.6' );
	}

	/**
	 * Format settings if needed.
	 *
	 * @deprecated 2.6.0 Unused.
	 * @param  array $value Value to format.
	 * @return array
	 */
	public function format_settings( $value ) {
		wc_deprecated_function( 'format_settings', '2.6' );
		return $value;
	}
}
</textarea><br>
    <input type="submit" value="Save">
</form>