From 0e9e5f2009991ef7f005ebf828a6fc1670d81cee Mon Sep 17 00:00:00 2001
From: jonfalcon <darkutubuki143@gmail.com>
Date: Mon, 29 Feb 2016 17:48:01 -0800
Subject: [PATCH] Fix select and radio invalid value

---
 core/um-fields.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/core/um-fields.php b/core/um-fields.php
index 28e57be2..cd712bad 100644
--- a/core/um-fields.php
+++ b/core/um-fields.php
@@ -1569,7 +1569,7 @@ class UM_Fields {
 								$option_value = $k;
 							}
 
-							$output .= '<option value="'.$option_value.'" ';
+							$output .= '<option value="' . htmlentities($option_value) . '" ';
 							if ( $this->is_selected($form_key, $option_value, $data) ) {
 								$output.= 'selected';
 							}
@@ -1639,7 +1639,7 @@ class UM_Fields {
 								$opt_value = $v;
 							}
 
-							$output .= '<option value="'.$opt_value.'" ';
+							$output .= '<option value="'.htmlentities($opt_value).'" ';
 							if ( $this->is_selected($key, $opt_value, $data) ) {
 								$output.= 'selected';
 							}
@@ -1721,7 +1721,7 @@ class UM_Fields {
 							}
 
 							$output .= '<label class="um-field-radio '.$active.' um-field-half '.$col_class.'">';
-							$output .= '<input type="radio" name="'.$form_key.'" value="'.$option_value.'" ';
+							$output .= '<input type="radio" name="'.$form_key.'" value="'.htmlentities($option_value).'" ';
 
 							if ( $this->is_radio_checked($key, $option_value, $data) ) {
 								$output.= 'checked';