fix: escape html values when inside compound metadata #721

This commit is contained in:
vnmedeiros 2022-08-17 09:00:51 -03:00
parent 0a1be6e3b3
commit 5ce3bb165e
1 changed files with 2 additions and 2 deletions

View File

@ -235,10 +235,10 @@ class Compound extends Metadata_Type {
?> ?>
<div class="tainacan-metadatum"> <div class="tainacan-metadatum">
<h4 class="label"> <h4 class="label">
<?php echo esc_html($meta->get_metadatum()->get_name()); ?> <?php echo wp_kses_tainacan($meta->get_metadatum()->get_name()); ?>
</h4> </h4>
<p> <p>
<?php echo wp_kses_post($meta->get_value_as_html()); ?> <?php echo wp_kses_tainacan($meta->get_value_as_html()); ?>
</p> </p>
</div> </div>
<?php <?php