From 2e0d2c4a348348eb4f0f92d2b42260a6301e1411 Mon Sep 17 00:00:00 2001
From: Alexander Agnarson <alexander.agnarson@gmail.com>
Date: Wed, 24 Feb 2021 14:54:20 +0100
Subject: [PATCH] Escape profile

---
 header.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/header.php b/header.php
index 255ff7a..90a0e58 100644
--- a/header.php
+++ b/header.php
@@ -98,13 +98,13 @@
 					<div id="profile" class="pad group">
 						<div id="profile-inner">
 							<?php if ( get_theme_mod('profile-image') ): ?>
-								<div id="profile-image"><img src="<?php echo get_theme_mod('profile-image'); ?>" alt="" /></div>
+								<div id="profile-image"><img src="<?php echo esc_html( get_theme_mod('profile-image') ); ?>" alt="" /></div>
 							<?php endif; ?>
 							<?php if ( get_theme_mod('profile-name') ): ?>
-								<div id="profile-name"><?php echo get_theme_mod('profile-name'); ?></div>
+								<div id="profile-name"><?php echo esc_html( get_theme_mod('profile-name') ); ?></div>
 							<?php endif; ?>
 							<?php if ( get_theme_mod('profile-description') ): ?>
-								<div id="profile-description"><?php echo get_theme_mod('profile-description'); ?></div>
+								<div id="profile-description"><?php echo wp_kses_post( get_theme_mod('profile-description') ); ?></div>
 							<?php endif; ?>
 						</div>
 					</div>