Pledge Form: Allow HTML within descriptions.

Fixes #63
This commit is contained in:
Ian Dunn 2019-10-30 13:09:17 -07:00
parent 782a40bcda
commit e61ce467cb
No known key found for this signature in database
GPG key ID: 99B971B50343CBCB
3 changed files with 19 additions and 4 deletions

View file

@ -36,9 +36,9 @@ function get_pledge_meta_config( $context = 'all' ) {
$user_input = array( $user_input = array(
'org-description' => array( 'org-description' => array(
'single' => true, 'single' => true,
'sanitize_callback' => 'sanitize_text_field', 'sanitize_callback' => __NAMESPACE__ . '\sanitize_description',
'show_in_rest' => true, 'show_in_rest' => true,
'php_filter' => FILTER_SANITIZE_STRING, 'php_filter' => FILTER_UNSAFE_RAW,
), ),
'org-name' => array( 'org-name' => array(
'single' => true, 'single' => true,
@ -93,6 +93,21 @@ function get_pledge_meta_config( $context = 'all' ) {
return $return; return $return;
} }
/**
* Sanitize description fields.
*
* @param string $insecure
*
* @return string
*/
function sanitize_description( $insecure ) {
$secure = wp_kses_data( $insecure );
$secure = wpautop( $secure );
$secure = wp_unslash( wp_rel_nofollow( $secure ) );
return $secure;
}
/** /**
* Register post meta keys for the custom post type. * Register post meta keys for the custom post type.
* *

View file

@ -49,7 +49,7 @@ get_header(); ?>
<h2><?php esc_html_e( 'About', 'wporg' ); ?></h2> <h2><?php esc_html_e( 'About', 'wporg' ); ?></h2>
<div class="pledge-company-description"> <div class="pledge-company-description">
<?php echo wp_kses_post( wpautop( $post->{ META_PREFIX . 'org-description' } ) ); ?> <?php echo wp_kses_data( wpautop( $post->{ META_PREFIX . 'org-description' } ) ); ?>
</div> </div>
<?php if ( ! empty( $contributors ) ) : ?> <?php if ( ! empty( $contributors ) ) : ?>

View file

@ -53,7 +53,7 @@ $contributor_title = sprintf(
<div class="entry-content"> <div class="entry-content">
<?php <?php
echo wp_kses_post( $content ); echo wpautop( wp_kses_data( $content ) );
?> ?>
<div class="pledge-contributors"> <div class="pledge-contributors">