From 516a963f7c2a55daa77713ecbdb490bff6303308 Mon Sep 17 00:00:00 2001
From: Champ Camba <heychampsupertramp@gmail.com>
Date: Tue, 2 May 2017 09:49:18 +0800
Subject: [PATCH] Add esc_textarea in textarea field

---
 core/um-filters-fields.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/core/um-filters-fields.php b/core/um-filters-fields.php
index 8036d1dd..6fa00ced 100644
--- a/core/um-filters-fields.php
+++ b/core/um-filters-fields.php
@@ -106,6 +106,7 @@
 		if ( isset( $data ) && isset( $data['html'] ) && $data['html'] == 1 )
 			return $value;
 
+		$value = esc_textarea( $value );
 		$value = preg_replace('$(https?://[a-z0-9_./?=&#-]+)(?![^<>]*>)$i', ' <a href="$1" target="_blank">$1</a> ', $value." ");
 		$value = preg_replace('$(www\.[a-z0-9_./?=&#-]+)(?![^<>]*>)$i', '<a target="_blank" href="http://$1">$1</a> ', $value." ");
 		$value = wpautop($value);