[buddypress-trac] [BuddyPress] #5183: Disallow HTML tags in profile fields
buddypress-trac
noreply at wordpress.org
Wed Sep 25 17:29:38 UTC 2013
#5183: Disallow HTML tags in profile fields
-------------------------+-----------------------------
Reporter: henrywright | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Core | Version:
Severity: normal | Keywords:
-------------------------+-----------------------------
An enhancement suggestion would be to disallow HTML tags in profile fields
by default.
{{{
add_filter( 'xprofile_data_value_before_save', 'wp_filter_nohtml_kses' );
}}}
Not sure if this is the best approach but this will strip HTML before the
field data is saved to the database.
I recently had some users enter rather shoddy HTML in their profile which
caused problems with my theme display.
--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5183>
BuddyPress <http://buddypress.org/>
BuddyPress
More information about the buddypress-trac
mailing list