From 4ff88f7409cdf61fe05ad190ebbc8714748de216 Mon Sep 17 00:00:00 2001
From: Alexander Agnarson <alexander.agnarson@gmail.com>
Date: Wed, 24 Feb 2021 14:53:03 +0100
Subject: [PATCH] Escape profile

---
 sidebar.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sidebar.php b/sidebar.php
index db81795..4dc129b 100644
--- a/sidebar.php
+++ b/sidebar.php
@@ -17,14 +17,14 @@
 						<div id="profile-image">
 							<div class="profile-skew"><div class="profile-skew-inner"></div></div>
 							<div class="profile-skew-bottom"><div class="profile-skew-inner-bottom"></div></div>
-							<img src="<?php echo get_theme_mod('profile-image'); ?>" alt="" />
+							<img src="<?php echo esc_html( get_theme_mod('profile-image') ); ?>" alt="" />
 						</div>
 					<?php endif; ?>
 					<?php if ( get_theme_mod('profile-name') ): ?>
-						<div id="profile-name"><?php echo get_theme_mod('profile-name'); ?></div>
+						<div id="profile-name"><?php echo esc_html( get_theme_mod('profile-name') ); ?></div>
 					<?php endif; ?>
 					<?php if ( get_theme_mod('profile-description') ): ?>
-						<div id="profile-description"><?php echo get_theme_mod('profile-description'); ?></div>
+						<div id="profile-description"><?php echo wp_kses_post( get_theme_mod('profile-description') ); ?></div>
 					<?php endif; ?>
 				</div>
 			<?php endif; ?>