buddypress/bp-xprofile
Boone B Gorges db016930a1 Cleanup of sanitization and formatting of xprofile output
In r6202 and r6204, sanitization was introduced into the xprofile output
functions, to protect against CSRF-style vulnerabilities. However, the
sanitization (esc_html()) was run in such a way that some clickable items,
such as email addresses, were double escaped, resulting in HTML tags being
printed to the screen rather than parsed by the browser.

This changeset reconfigures the sanitization procedure, so that output is
sanitized by esc_html() before being run through the formatting filters such
as make_clickable() and xprofile_filter_link_profile_data().

Fixes #4392

Props rachelbaker, DJPaul

git-svn-id: https://buddypress.svn.wordpress.org/trunk@6224 cdf35c40-ae34-48e0-9cc9-0c9da1808c22
2012-08-05 21:21:03 +00:00
..
admin Compress scripts/styles: 1.6-alpha-5997. 2012-04-20 19:58:27 +00:00
bp-xprofile-actions.php Remove unneeded globals and clean up some code in XProfile component. See #3989. 2012-02-11 02:14:07 +00:00
bp-xprofile-activity.php Replace ambiguous 'object' phpdoc references with more accurate descriptions for the $bp global 2012-03-16 00:52:24 +00:00
bp-xprofile-admin.php In xprofile_admin_manage_field(), make sure $field_id is set before setting meta 2012-06-19 12:18:19 +00:00
bp-xprofile-buddybar.php Remove unneeded globals and clean up some code in XProfile component. See #3989. 2012-02-11 02:14:07 +00:00
bp-xprofile-cache.php Remove unneeded globals and clean up some code in XProfile component. See #3989. 2012-02-11 02:14:07 +00:00
bp-xprofile-caps.php Allows users to modify profile field visibility during registration. Fixes #4044. 2012-02-24 22:34:38 +00:00
bp-xprofile-classes.php Define object property to avoid errors in PHP 5.4 strict 2012-08-05 21:20:55 +00:00
bp-xprofile-cssjs.php First pass at replacing manual script versions with bp_get_version(). See #3992. 2012-02-13 04:35:21 +00:00
bp-xprofile-filters.php Cleanup of sanitization and formatting of xprofile output 2012-08-05 21:21:03 +00:00
bp-xprofile-functions.php Whitespace cleanup in xprofile component and templates 2012-06-09 14:40:37 +00:00
bp-xprofile-loader.php Add missing field declarations to classes. Fixes #4159 2012-04-21 15:47:05 +00:00
bp-xprofile-screens.php Whitespace cleanup in xprofile component and templates 2012-06-09 14:40:37 +00:00
bp-xprofile-template.php Whitespace cleanup in xprofile component and templates 2012-06-09 14:40:37 +00:00