[buddypress-trac] [BuddyPress] #5183: Disallow HTML tags in profile fields

buddypress-trac noreply at wordpress.org
Wed Sep 25 17:29:38 UTC 2013

#5183: Disallow HTML tags in profile fields
 Reporter:  henrywright  |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  Core         |    Version:
 Severity:  normal       |   Keywords:
 An enhancement suggestion would be to disallow HTML tags in profile fields
 by default.

 add_filter( 'xprofile_data_value_before_save', 'wp_filter_nohtml_kses' );

 Not sure if this is the best approach but this will strip HTML before the
 field data is saved to the database.

 I recently had some users enter rather shoddy HTML in their profile which
 caused problems with my theme display.

Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5183>
BuddyPress <http://buddypress.org/>

More information about the buddypress-trac mailing list