Changeset 6569 for trunk/bp-members/bp-members-template.php

Timestamp:

12/06/2012 10:58:36 PM (13 years ago)

Author:

johnjamesjacoby

Message:

Escape output of bp_get_member_name(). Props Jacek (trunk)

File:

• trunk/bp-members/bp-members-template.php (modified) (1 diff)

trunk/bp-members/bp-members-template.php

@@ -582 +582 @@
     }
     add_filter( 'bp_get_member_name', 'wp_filter_kses' );
-    add_filter( 'bp_get_member_name', 'stripslashes' );
-    add_filter( 'bp_get_member_name', 'strip_tags' );
+    add_filter( 'bp_get_member_name', 'stripslashes'   );
+    add_filter( 'bp_get_member_name', 'strip_tags'     );
+    add_filter( 'bp_get_member_name', 'esc_html'       );
 
 function bp_member_last_active() {