[buddypress-trac] [BuddyPress Trac] #7656: Update `bp_new_group_invite_friend_list` for new $args to support full list markup

buddypress-trac noreply at wordpress.org
Wed Jan 17 15:38:04 UTC 2018


#7656: Update `bp_new_group_invite_friend_list` for new $args to support full list
markup
-------------------------+------------------
 Reporter:  hnla         |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  3.0
Component:  Groups       |     Version:
 Severity:  normal       |  Resolution:
 Keywords:  has-patch    |
-------------------------+------------------

Comment (by hnla):

 ^yep

 However taking into account we can pass strings of type `'<div class="2>'`
 in to various arg functions unfettered in core and also use wp_kses
 liberally in places I've re-factored patch along the lines you suggested:

 Allow args in style of `array( 'before' = > '<ul class="">')`
 Added a simple allowed array and filtered the before/after args on
 wp_kses.

 We manage things somewhat, in this context there are limited options, so
 ensure what is passed in confirms to that narrow set.

 Equally I can appreciate just leaving it wide open.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7656#comment:6>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list