10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-13 19:56:27 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed issue with echo XSS in user description;

Browse Source
This commit is contained in:
Nikita Sinelnikov
2022-03-22 23:06:34 +02:00
parent 0f71ef1ce0
commit a35dbba905
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/core/class-fields.php
+6
View File
@@ -4203,6 +4203,12 @@ if ( ! class_exists( 'um\core\Fields' ) ) {
$res = stripslashes( $res );
}
if ( 'description' === $data['metakey'] ) {
if ( UM()->options()->get( 'profile_show_html_bio' ) ) {
$res = make_clickable( wpautop( wp_kses_post( $res ) ) );
} else {
$res = esc_html( $res );
}
$res = nl2br( $res );
}