Changeset 12396

Timestamp:

05/14/2019 07:04:41 PM (6 years ago)

Author:

boonebgorges

Message:

Ensure that xprofile field value HTML whitelist is applied during profile edit.

See #8063, #8094.

File:

• trunk/src/bp-xprofile/bp-xprofile-filters.php (modified) (1 diff)

trunk/src/bp-xprofile/bp-xprofile-filters.php

@@ -16 +16 @@
 add_filter( 'bp_get_the_profile_group_description', 'wp_filter_kses', 1 );
 add_filter( 'bp_get_the_profile_field_name',        'wp_filter_kses', 1 );
-add_filter( 'bp_get_the_profile_field_edit_value',  'wp_filter_kses', 1 );
+add_filter( 'bp_get_the_profile_field_edit_value',  'xprofile_sanitize_data_value_before_display', 1, 3 );
 add_filter( 'bp_get_the_profile_field_description', 'wp_filter_kses', 1 );
 add_filter( 'bp_get_the_profile_field_value',       'xprofile_sanitize_data_value_before_display', 1, 3 );