Changeset 6204

Timestamp:

07/27/2012 03:03:20 AM (12 years ago)

Author:

johnjamesjacoby

Message:

XProfile:

• Escape non-clickable, non-searchable value output that is part of an array of comma separated values.
• For 1.6.

File:

• trunk/bp-xprofile/bp-xprofile-filters.php (modified) (1 diff)

trunk/bp-xprofile/bp-xprofile-filters.php

@@ -175 +175 @@
                 // More than 5 commas
                 if ( count( explode( ' ', $value ) ) > 5 ) {
-                    $new_values[] = $value;
+                    $new_values[] = esc_html( $value );
 
                 // Less than 5 commas