Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The task description html tags are not persisted properly #2

Open
allenprell opened this issue Jan 24, 2024 · 0 comments
Open

The task description html tags are not persisted properly #2

allenprell opened this issue Jan 24, 2024 · 0 comments

Comments

@allenprell
Copy link

On line 672 in buddytask.php the code
$task_description = isset($_REQUEST['task_description']) ? wp_unslash(sanitize_text_field($_REQUEST['task_description'])) : null;
should be
$task_description = isset($_REQUEST['task_description']) ? wp_unslash($_REQUEST['task_description']) : null;

The sanitize_text_field function removes all HTML tags added the the tinymce editor. I believe the wordpress insert and update database functions already include protection against SQL injection so the sanitize_text_field is not required and causes problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant