Merge pull request #11 from voceconnect/sanitize_escape_fields

use kses_post on
voceconnect · Nov 14, 2014 · 68c1c44 · 68c1c44
2 parents 5b3270e + 788f4eb
commit 68c1c44
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/post-selection-ui.php b/post-selection-ui.php
@@ -266,7 +266,7 @@ private function render_selected_rows($post_ids) {
 			$output .= "<tr data-post_id='{$post_id}'>\n".
 				"\t<td class='psu-col-delete'><a href='#' title='Remove'></a></td>".
 				"\t<td class='psu-col-title'>\n";
-			$output .= $title; //title escaped on line 243
+			$output .= wp_kses_post( $title );
 			$output .= "\n</td>\n";
 			if($this->args['sortable']) {
 				$output .= "\t<td class='psu-col-order'>&nbsp;</td>";