fix: escape html values when inside compound metadata #721

This commit is contained in:
vnmedeiros 2022-08-17 09:00:51 -03:00
parent 0a1be6e3b3
commit 5ce3bb165e
1 changed files with 2 additions and 2 deletions

View File

@ -235,10 +235,10 @@ class Compound extends Metadata_Type {
?>
<div class="tainacan-metadatum">
<h4 class="label">
<?php echo esc_html($meta->get_metadatum()->get_name()); ?>
<?php echo wp_kses_tainacan($meta->get_metadatum()->get_name()); ?>
</h4>
<p>
<?php echo wp_kses_post($meta->get_value_as_html()); ?>
<?php echo wp_kses_tainacan($meta->get_value_as_html()); ?>
</p>
</div>
<?php