Changeset 3747070 for hivepress/trunk/includes/forms/class-form.php

Timestamp:

10/14/2026 08:02:34 PM (7 days ago)

Author:

hivepress

Message:

Release 1.8.0

File:

• hivepress/trunk/includes/forms/class-form.php (modified) (1 diff)

hivepress/trunk/includes/forms/class-form.php

@@ -187 +187 @@
                 // Set message.
                 if ( $this->message ) {
-                        $attributes['data-message'] = $this->message;
+                        $attributes['data-message'] = htmlspecialchars( hp\sanitize_html( $this->message ), ENT_QUOTES, 'UTF-8' );
                 }