Escape output in template functions
This commit is contained in:
@@ -86,7 +86,7 @@ if ( ! function_exists( 'sportspress_taxonomy_archive_description' ) ) {
|
|||||||
if ( is_tax( array( 'sp_season', 'sp_league', 'sp_venue', 'sp_position' ) ) && get_query_var( 'paged' ) == 0 ) {
|
if ( is_tax( array( 'sp_season', 'sp_league', 'sp_venue', 'sp_position' ) ) && get_query_var( 'paged' ) == 0 ) {
|
||||||
$description = apply_filters( 'the_content', term_description() );
|
$description = apply_filters( 'the_content', term_description() );
|
||||||
if ( $description ) {
|
if ( $description ) {
|
||||||
echo '<div class="term-description">' . $description . '</div>';
|
echo '<div class="term-description">' . esc_html( $description ) . '</div>';
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user