From 833afbd745c83bc72a52cee93d7dd1b02622d0a3 Mon Sep 17 00:00:00 2001 From: Robin Cornett Date: Fri, 14 Aug 2015 09:58:10 -0400 Subject: [PATCH] Escape description output --- includes/class-displayfeaturedimagegenesis-description.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/includes/class-displayfeaturedimagegenesis-description.php b/includes/class-displayfeaturedimagegenesis-description.php index 7098919..d74fdde 100644 --- a/includes/class-displayfeaturedimagegenesis-description.php +++ b/includes/class-displayfeaturedimagegenesis-description.php @@ -127,7 +127,7 @@ class Display_Featured_Image_Genesis_Description { $intro_text = apply_filters( 'display_featured_image_genesis_term_description', $term->meta['intro_text'] ); if ( $intro_text ) { - printf( '
%s
', wpautop( $intro_text ) ); + printf( '
%s
', wp_kses_post( wpautop( $intro_text ) ) ); } } @@ -155,7 +155,7 @@ class Display_Featured_Image_Genesis_Description { $intro_text = apply_filters( 'display_featured_image_genesis_author_description', get_the_author_meta( 'intro_text', (int) get_query_var( 'author' ) ) ); if ( $intro_text ) { - printf( '
%s
', wpautop( $intro_text ) ); + printf( '
%s
', wp_kses_post( wpautop( $intro_text ) ) ); } } @@ -191,7 +191,7 @@ class Display_Featured_Image_Genesis_Description { $intro_text = apply_filters( 'display_featured_image_genesis_cpt_description', genesis_get_cpt_option( 'intro_text' ) ); if ( $intro_text ) { - printf( '
%s
', wpautop( $intro_text ) ); + printf( '
%s
', wp_kses_post( wpautop( $intro_text ) ) ); } }