Changeset 13820 for trunk/src/bp-templates/bp-nouveau/includes/messages/template-tags.php

Timestamp:

04/28/2024 10:08:00 PM (5 months ago)

Author:

imath

Message:

BP Nouveau: improve PHP code standards using WPCS

See #7228 (trunk)

File:

• trunk/src/bp-templates/bp-nouveau/includes/messages/template-tags.php (modified) (2 diffs)

trunk/src/bp-templates/bp-nouveau/includes/messages/template-tags.php

@@ -109 +109 @@
  */
 function bp_nouveau_message_search_form() {
-    $search_form_html = bp_buffer_template_part( 'common/js-templates/messages/search-form', null, false );
-
     /**
      * Filters the private message component search form.
@@ -118 +116 @@
      * @param string $search_form_html HTML markup for the message search form.
      */
-    echo apply_filters( 'bp_message_search_form', $search_form_html );
+    $search_form_html = apply_filters(
+        'bp_message_search_form',
+        bp_buffer_template_part( 'common/js-templates/messages/search-form', null, false )
+    );
+
+    echo wp_kses(
+        $search_form_html,
+        array(
+            'form'   => array(
+                'action'         => true,
+                'method'         => true,
+                'id'             => true,
+                'class'          => true,
+                'data-bp-search' => true,
+            ),
+            'label'  => array(
+                'for'   => true,
+                'class' => true,
+            ),
+            'input'  => array(
+                'type'        => true,
+                'id'          => true,
+                'name'        => true,
+                'placeholder' => true,
+                'class'       => true,
+            ),
+            'button' => array(
+                'type'  => true,
+                'name'  => true,
+                'id'    => true,
+                'class' => true,
+            ),
+            'span'   => array(
+                'class'       => true,
+                'aria-hidden' => true,
+            ),
+        )
+    );
 }