Changeset 13820 for trunk/src/bp-templates/bp-nouveau/includes/messages/template-tags.php

Timestamp:

04/28/2024 10:08:00 PM (2 years ago)

Author:

imath

Message:

BP Nouveau: improve PHP code standards using WPCS

See #7228 (trunk)

File:

• trunk/src/bp-templates/bp-nouveau/includes/messages/template-tags.php (modified) (2 diffs)

trunk/src/bp-templates/bp-nouveau/includes/messages/template-tags.php

@@ -109 +109 @@
  */
 function bp_nouveau_message_search_form() {
-        $search_form_html = bp_buffer_template_part( 'common/js-templates/messages/search-form', null, false );
-
         /**
          * Filters the private message component search form.
@@ -118 +116 @@
          * @param string $search_form_html HTML markup for the message search form.
          */
-        echo apply_filters( 'bp_message_search_form', $search_form_html );
+        $search_form_html = apply_filters(
+                'bp_message_search_form',
+                bp_buffer_template_part( 'common/js-templates/messages/search-form', null, false )
+        );
+
+        echo wp_kses(
+                $search_form_html,
+                array(
+                        'form'   => array(
+                                'action'         => true,
+                                'method'         => true,
+                                'id'             => true,
+                                'class'          => true,
+                                'data-bp-search' => true,
+                        ),
+                        'label'  => array(
+                                'for'   => true,
+                                'class' => true,
+                        ),
+                        'input'  => array(
+                                'type'        => true,
+                                'id'          => true,
+                                'name'        => true,
+                                'placeholder' => true,
+                                'class'       => true,
+                        ),
+                        'button' => array(
+                                'type'  => true,
+                                'name'  => true,
+                                'id'    => true,
+                                'class' => true,
+                        ),
+                        'span'   => array(
+                                'class'       => true,
+                                'aria-hidden' => true,
+                        ),
+                )
+        );
 }