fix: escape html values when inside relationship metadata #721

This commit is contained in:
vnmedeiros 2022-08-17 09:42:30 -03:00
parent 5ce3bb165e
commit 127db4a14f
2 changed files with 2 additions and 2 deletions

View File

@ -235,7 +235,7 @@ class Compound extends Metadata_Type {
?>
<div class="tainacan-metadatum">
<h4 class="label">
<?php echo wp_kses_tainacan($meta->get_metadatum()->get_name()); ?>
<?php echo esc_html($meta->get_metadatum()->get_name()); ?>
</h4>
<p>
<?php echo wp_kses_tainacan($meta->get_value_as_html()); ?>

View File

@ -337,7 +337,7 @@ class Relationship extends Metadata_Type {
<?php echo esc_html($meta->get_metadatum()->get_name()); ?>
</h5>
<p>
<?php echo wp_kses_post(($value_link === false ? $meta->get_value_as_html() : $value_link)); ?>
<?php echo wp_kses_tainacan(($value_link === false ? $meta->get_value_as_html() : $value_link)); ?>
</p>
</div>
<?php