Changeset 7790 for trunk/bp-groups/bp-groups-filters.php

Timestamp:

02/05/2014 06:53:33 PM (11 years ago)

Author:

johnjamesjacoby

Message:

After creating a new Group and switching back to the "Details" tab, ensure Group ID, name, and description field output is properly sanitized. Props Pietro Oliva. (trunk)

File:

• trunk/bp-groups/bp-groups-filters.php (modified) (1 diff)

trunk/bp-groups/bp-groups-filters.php

@@ -52 +52 @@
 add_filter( 'groups_group_description_before_save', 'force_balance_tags' );
 
+// Trim trailing spaces from name and description when saving
+add_filter( 'groups_group_name_before_save',        'trim' );
+add_filter( 'groups_group_description_before_save', 'trim' );
+
+// Escape output of new group creation details
+add_filter( 'bp_get_new_group_id',          'esc_attr'     );
+add_filter( 'bp_get_new_group_name',        'esc_attr'     );
+add_filter( 'bp_get_new_group_description', 'esc_textarea' );
+
+// Format numberical output
 add_filter( 'bp_get_total_group_count',      'bp_core_number_format' );
 add_filter( 'bp_get_group_total_for_member', 'bp_core_number_format' );