From 3211fb2994bf8804ab34dffa07fbce547cba2977 Mon Sep 17 00:00:00 2001 From: Mykyta Synelnikov Date: Wed, 25 Sep 2024 23:12:17 +0300 Subject: [PATCH] * fixed #1516; --- includes/admin/core/class-admin-settings.php | 4 ++-- includes/core/class-access.php | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/includes/admin/core/class-admin-settings.php b/includes/admin/core/class-admin-settings.php index 2e363783..6fd47efe 100644 --- a/includes/admin/core/class-admin-settings.php +++ b/includes/admin/core/class-admin-settings.php @@ -638,7 +638,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Settings' ) ) { ), array( 'id' => 'restricted_block_message', - 'type' => 'textarea', + 'type' => 'wp_editor', 'label' => __( 'Restricted Access Block Message', 'ultimate-member' ), 'description' => __( 'This is the message shown to users that do not have permission to view the block\'s content.', 'ultimate-member' ), 'conditional' => array( 'restricted_blocks', '=', 1 ), @@ -650,7 +650,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Settings' ) ) { 'sanitize' => 'bool', ); $settings_map['restricted_block_message'] = array( - 'sanitize' => 'textarea', + 'sanitize' => 'wp_kses', ); } diff --git a/includes/core/class-access.php b/includes/core/class-access.php index 9f1cc02a..5277bc8a 100644 --- a/includes/core/class-access.php +++ b/includes/core/class-access.php @@ -1264,7 +1264,7 @@ if ( ! class_exists( 'um\core\Access' ) ) { return $block_content; } - $default_message = UM()->options()->get( 'restricted_block_message' ); + $default_message = wp_kses_post( UM()->options()->get( 'restricted_block_message' ) ); switch ( $block['attrs']['um_who_access'] ) { case '1': { if ( ! is_user_logged_in() ) {