10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 18:56:10 +09:00
Code Issues Packages Projects Releases Wiki Activity

Task CU-86cxva4f0

Browse Source 
- fixed the "Privacy Policy" field in the registration form - stripped out forms and other disallowed HTML from the "Privacy Policy" content.
This commit is contained in:
yuriinalivaiko
2025-01-30 23:13:11 +02:00
parent 26c8aa21e1
commit 0221b40b57
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
templates/gdpr-register.php
+7 -2
View File
@@ -12,7 +12,12 @@
* @var object $um_content_query
* @var array $args
*/
if ( ! defined( 'ABSPATH' ) ) exit; ?>
if ( ! defined( 'ABSPATH' ) ) exit;
// The "Privacy Policy" field content can not contain forms.
$allowed_html = UM()->get_allowed_html( 'templates' );
unset( $allowed_html['form'] );
?>
<!-- This file should primarily consist of HTML with a little bit of PHP. -->
<div class="um-field um-field-type_terms_conditions" data-key="use_terms_conditions_agreement" style="display:block;padding:0;">
@@ -22,7 +27,7 @@ if ( ! defined( 'ABSPATH' ) ) exit; ?>
$um_content_query = get_post( $args['use_gdpr_content_id'] );
if ( ! empty( $um_content_query ) && ! is_wp_error( $um_content_query ) ) {
$content = apply_filters( 'um_gdpr_policies_page_content', $um_content_query->post_content, $args );
echo apply_filters( 'the_content', $content, $um_content_query->ID );
echo wp_kses( apply_filters( 'the_content', $content, $um_content_query->ID ), $allowed_html );
}
} ?>
</div>