[buddypress-trac] [BuddyPress] #5183: Disallow HTML tags in profile fields

buddypress-trac noreply at wordpress.org
Wed Sep 25 17:29:38 UTC 2013


#5183: Disallow HTML tags in profile fields
-------------------------+-----------------------------
 Reporter:  henrywright  |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  Core         |    Version:
 Severity:  normal       |   Keywords:
-------------------------+-----------------------------
 An enhancement suggestion would be to disallow HTML tags in profile fields
 by default.


 {{{
 add_filter( 'xprofile_data_value_before_save', 'wp_filter_nohtml_kses' );
 }}}

 Not sure if this is the best approach but this will strip HTML before the
 field data is saved to the database.

 I recently had some users enter rather shoddy HTML in their profile which
 caused problems with my theme display.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5183>
BuddyPress <http://buddypress.org/>
BuddyPress


More information about the buddypress-trac mailing list