Added wp_kses_post to purchase note

2014-10-21 09:09:20 +02:00 · 2014-10-21 09:09:20 +02:00 · f26df90a25
parent 96a9e48823
commit f26df90a25
1 changed files with 1 additions and 1 deletions
--- a/templates/order/order-details.php
+++ b/templates/order/order-details.php
@ -74,7 +74,7 @@ $order = wc_get_order( $order_id );
 				if ( $order->has_status( array( 'completed', 'processing' ) ) && ( $purchase_note = get_post_meta( $_product->id, '_purchase_note', true ) ) ) {
 					?>
 					<tr class="product-purchase-note">
-						<td colspan="3"><?php echo wpautop( do_shortcode( $purchase_note ) ); ?></td>
+						<td colspan="3"><?php echo wpautop( do_shortcode( wp_kses_post( $purchase_note ) ) ); ?></td>
 					</tr>
 					<?php
 				}