From 9848460460b2ef9e904d9426da89d330123b6d50 Mon Sep 17 00:00:00 2001
From: Brian Miyaji <brian@themeboy.com>
Date: Sat, 10 Dec 2016 18:23:14 +1100
Subject: [PATCH] Strip tags from league table editor

---
 .../admin/post-types/meta-boxes/class-sp-meta-box-table-data.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-data.php b/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-data.php
index 37bc8a8c..1fe91ac6 100644
--- a/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-data.php
+++ b/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-data.php
@@ -92,6 +92,7 @@ class SP_Meta_Box_Table_Data {
 								<?php foreach( $columns as $column => $label ):
 									$value = sp_array_value( $team_stats, $column, '' );
 									$placeholder = sp_array_value( sp_array_value( $placeholders, $team_id, array() ), $column, 0 );
+									$placeholder = wp_strip_all_tags( $placeholder );
 									?>
 									<td><input type="text" name="sp_teams[<?php echo $team_id; ?>][<?php echo $column; ?>]" value="<?php echo esc_attr( $value ); ?>" placeholder="<?php echo esc_attr( $placeholder ); ?>" data-placeholder="<?php echo esc_attr( $placeholder ); ?>" data-matrix="<?php echo $team_id; ?>_<?php echo $column; ?>" data-adjustment="<?php echo esc_attr( sp_array_value( sp_array_value( $adjustments, $team_id, array() ), $column, 0 ) ); ?>" /></td>
 								<?php endforeach; ?>