Escape payment gateway integration settings field description.

pronamic · Oct 4, 2023 · ffca40b · ffca40b
1 parent 8382cc0
commit ffca40b
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/views/meta-box-gateway-settings.php b/views/meta-box-gateway-settings.php
@@ -412,7 +412,17 @@ function ( $section ) {
 							if ( isset( $field['description'] ) ) {
 								printf(
 									'<p class="pronamic-pay-description description">%s</p>',
-									$field['description']
+									\wp_kses(
+										$field['description'],
+										[
+											'a'    => [
+												'href'   => true,
+												'target' => true,
+											],
+											'br'   => [],
+											'code' => [],
+										]
+									)
 								);
 							}