Skip to content

Plugin arbitrarily run wp_kses() on acf/update_value #7

@acf-extended

Description

@acf-extended

Hello,

I found a problem in your plugin which runs wp_kses() on all fields using acf/update_value in the file acf-form-shortcode-master\includes\class-acf-form-shortcode.php:170.

The acf/update_value hook without selector is a wildcard hook which is applied to all ACF fields. The problem with wp_kses() is that it deny the usage of HTML markup in any field, even the one that are not related to the plugin.

This leads to problems with fields that are meant to receive actual HTML code.

Regards.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions