From f26df90a255e4e0f293e3177291d0895deac4eeb Mon Sep 17 00:00:00 2001
From: Barry Kooij <git@barrykooij.nl>
Date: Tue, 21 Oct 2014 09:09:20 +0200
Subject: [PATCH] Added wp_kses_post to purchase note

---
 templates/order/order-details.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/order/order-details.php b/templates/order/order-details.php
index a1de4e13790..5173f735a50 100644
--- a/templates/order/order-details.php
+++ b/templates/order/order-details.php
@@ -74,7 +74,7 @@ $order = wc_get_order( $order_id );
 				if ( $order->has_status( array( 'completed', 'processing' ) ) && ( $purchase_note = get_post_meta( $_product->id, '_purchase_note', true ) ) ) {
 					?>
 					<tr class="product-purchase-note">
-						<td colspan="3"><?php echo wpautop( do_shortcode( $purchase_note ) ); ?></td>
+						<td colspan="3"><?php echo wpautop( do_shortcode( wp_kses_post( $purchase_note ) ) ); ?></td>
 					</tr>
 					<?php
 				}