From 8ad07b264f7f83c256654fbf0838c5035660695a Mon Sep 17 00:00:00 2001
From: Nikita Sinelnikov <nsinelnikov.work@gmail.com>
Date: Thu, 15 Jul 2021 17:09:20 +0300
Subject: [PATCH] - fixed saving shortcode + content block settings using
 sanitize;

---
 includes/admin/core/class-admin-builder.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/includes/admin/core/class-admin-builder.php b/includes/admin/core/class-admin-builder.php
index 8221aaa0..8300d00e 100644
--- a/includes/admin/core/class-admin-builder.php
+++ b/includes/admin/core/class-admin-builder.php
@@ -689,7 +689,11 @@ if ( ! class_exists( 'um\admin\core\Admin_Builder' ) ) {
 						}
 
 					} elseif ( strstr( $key, 'um_editor' ) ) {
-						$save[ $_metakey ]['content'] = $val;
+						if ( 'block' === $array['post']['_type'] ) {
+							$save[ $_metakey ]['content'] = wp_kses_post( $val );
+						} else {
+							$save[ $_metakey ]['content'] = sanitize_textarea_field( $val );
+						}
 					}
 
 				}