Ticket #5704: 5704.02.patch

src/bp-xprofile/bp-xprofile-filters.php

@@ -52 +52 @@
 add_filter( 'bp_get_the_profile_field_value',           'xprofile_filter_link_profile_data',  9, 2 );
 
 add_filter( 'xprofile_data_value_before_save',          'xprofile_sanitize_data_value_before_save', 1, 2 );
+add_filter( 'xprofile_field_options_before_save',       'bp_xprofile_sanitize_options_before_save', 1, 2 );
 add_filter( 'xprofile_filtered_data_value_before_save', 'trim', 2 );
 
 /**
@@ -356 +357 @@
 
         return $q;
 }
+
+/**
+ * Filter field options before saving it to database.
+ *
+ * @since BuddyPress (2.1.0)
+ *
+ * @param array $options.
+ * @return array stripslahed values
+ */
+function bp_xprofile_sanitize_options_before_save( $options = array() ) {
+        return array_map( 'stripslashes', $options );
+}