10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 18:56:10 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed XSS issue with current profile URL

Browse Source
This commit is contained in:
nikitasinelnikov
2021-05-07 13:42:20 +03:00
parent 8e2adccba9
commit 60187cdc67
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/core/class-fields.php
+3 -3
View File
@@ -4346,14 +4346,14 @@ if ( ! class_exists( 'um\core\Fields' ) ) {
if ( UM()->options()->get( 'profile_empty_text' ) ) {
$emo = UM()->options()->get( 'profile_empty_text_emo' );
if ($emo) {
if ( $emo ) {
$emo = '<i class="um-faicon-frown-o"></i>';
} else {
$emo = false;
}
if (um_is_myprofile()) {
$output .= '<p class="um-profile-note">' . $emo . '<span>' . sprintf( __( 'Your profile is looking a little empty. Why not <a href="%s">add</a> some information!', 'ultimate-member' ), um_edit_profile_url() ) . '</span></p>';
if ( um_is_myprofile() ) {
$output .= '<p class="um-profile-note">' . $emo . '<span>' . sprintf( __( 'Your profile is looking a little empty. Why not <a href="%s">add</a> some information!', 'ultimate-member' ), esc_url( um_edit_profile_url() ) ) . '</span></p>';
} else {
$output .= '<p class="um-profile-note">' . $emo . '<span>' . __( 'This user has not added any information to their profile yet.', 'ultimate-member' ) . '</span></p>';
}