Merge pull request #151 from pronamic/150-payment-gateway-integration…

…-settings-field-description-output-not-escaped Escape payment gateway integration settings field description
pronamic · Oct 4, 2023 · 3e3721b · 3e3721b
2 parents 8382cc0 + ffca40b
commit 3e3721b
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/views/meta-box-gateway-settings.php b/views/meta-box-gateway-settings.php
@@ -412,7 +412,17 @@ function ( $section ) {
 							if ( isset( $field['description'] ) ) {
 								printf(
 									'<p class="pronamic-pay-description description">%s</p>',
-									$field['description']
+									\wp_kses(
+										$field['description'],
+										[
+											'a'    => [
+												'href'   => true,
+												'target' => true,
+											],
+											'br'   => [],
+											'code' => [],
+										]
+									)
 								);
 							}