diff --git a/includes/admin/class-admin.php b/includes/admin/class-admin.php index fe9fe234..35722c97 100644 --- a/includes/admin/class-admin.php +++ b/includes/admin/class-admin.php @@ -207,7 +207,7 @@ if ( ! class_exists( 'um\admin\Admin' ) ) { 'sanitize' => 'int', ), '_um_restrict_custom_message' => array( - 'sanitize' => 'textarea', + 'sanitize' => 'wp_kses', ), '_um_access_redirect' => array( 'sanitize' => 'int', @@ -240,7 +240,7 @@ if ( ! class_exists( 'um\admin\Admin' ) ) { 'sanitize' => 'int', ), '_um_restrict_custom_message' => array( - 'sanitize' => 'textarea', + 'sanitize' => 'wp_kses', ), '_um_access_redirect' => array( 'sanitize' => 'int', @@ -1176,6 +1176,9 @@ if ( ! class_exists( 'um\admin\Admin' ) ) { case 'textarea': $sanitized[ $k ] = sanitize_textarea_field( $v ); break; + case 'wp_kses': + $sanitized[ $k ] = wp_kses_post( $v ); + break; } } @@ -1229,6 +1232,9 @@ if ( ! class_exists( 'um\admin\Admin' ) ) { case 'textarea': $sanitized[ $k ] = sanitize_textarea_field( $v ); break; + case 'wp_kses': + $sanitized[ $k ] = wp_kses_post( $v ); + break; } }