'' ); } public function sanitize( array $data ): array { $url = isset( $data['url'] ) ? wp_unslash( $data['url'] ) : ''; // esc_url_raw rejects javascript: and other unsafe protocols while // accepting an empty string (used to clear the favicon). $url = esc_url_raw( (string) $url ); return array( 'url' => $url ); } public function register(): void { add_action( 'init', array( $this, 'maybe_suppress_competitors' ), 0 ); add_action( 'wp_head', array( $this, 'output_favicon' ), 9999 ); add_action( 'admin_head', array( $this, 'output_favicon' ), 9999 ); add_action( 'login_head', array( $this, 'output_favicon' ), 9999 ); add_action( 'admin_enqueue_scripts', array( $this, 'maybe_enqueue_media' ) ); } /** * When a BW Dev favicon URL is set we own the favicon — so suppress WP * core's own `wp_site_icon` output (which Kadence and other themes can * also pipe through). Without this, browsers may pick the wrong tag and * the BW Dev favicon silently loses to whatever the theme/core injected * earlier in the head. * * Only fires when there's a configured URL — when blank, WP's normal * site-icon flow is left alone. */ public function maybe_suppress_competitors(): void { $url = (string) bw_dev()->settings()->get( $this->slug(), 'url', '' ); if ( '' === $url ) { return; } // `wp_site_icon` is the canonical core hook that emits the WP Customizer // Site Icon tags (icon-32, icon-192, apple-touch-icon, msapplication-TileImage). // Hooked at priority 99 on all three head actions — match exactly to remove. remove_action( 'wp_head', 'wp_site_icon', 99 ); remove_action( 'admin_head', 'wp_site_icon', 99 ); remove_action( 'login_head', 'wp_site_icon', 99 ); } /** * Enqueue wp.media only when our settings tab is the active one, so the * library doesn't load on unrelated admin pages. */ public function maybe_enqueue_media( $hook ): void { if ( 'settings_page_' . BW_Dev_Admin_Page::MENU_SLUG !== $hook ) { return; } $query = wp_unslash( $_GET ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended $tab = isset( $query['tab'] ) ? sanitize_key( (string) $query['tab'] ) : 'modules'; if ( $this->slug() !== $tab ) { return; } wp_enqueue_media(); } public function output_favicon(): void { $url = (string) bw_dev()->settings()->get( $this->slug(), 'url', '' ); if ( '' === $url ) { return; } $safe = esc_url( $url ); echo "\n"; echo '' . "\n"; echo '' . "\n"; echo '' . "\n"; } public function render_tab(): void { $url = (string) bw_dev()->settings()->get( $this->slug(), 'url', '' ); $is_set = '' !== $url; $field_id = 'bw-dev-favicon-url'; $field_nm = BW_Dev_Settings::OPTION . '[' . $this->slug() . '][url]'; ?>

tag near the bottom of the to confirm it\'s rendering.', 'bw-dev' ); ?>