[buddypress-trac] [BuddyPress Trac] #7656: Update `bp_new_group_invite_friend_list` for new $args to support full list markup
buddypress-trac
noreply at wordpress.org
Wed Jan 17 15:38:04 UTC 2018
#7656: Update `bp_new_group_invite_friend_list` for new $args to support full list
markup
-------------------------+------------------
Reporter: hnla | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: 3.0
Component: Groups | Version:
Severity: normal | Resolution:
Keywords: has-patch |
-------------------------+------------------
Comment (by hnla):
^yep
However taking into account we can pass strings of type `'<div class="2>'`
in to various arg functions unfettered in core and also use wp_kses
liberally in places I've re-factored patch along the lines you suggested:
Allow args in style of `array( 'before' = > '<ul class="">')`
Added a simple allowed array and filtered the before/after args on
wp_kses.
We manage things somewhat, in this context there are limited options, so
ensure what is passed in confirms to that narrow set.
Equally I can appreciate just leaving it wide open.
--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7656#comment:6>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac
More information about the buddypress-trac
mailing list