Escaping attributes
-
All form attributes queried from database should use esc_attr() function. When I used url in a field label saved and then edit later apostrophes were not escaped so input field was broken. I only checked add_field.php.
Please review and fix, thank you !
https://www.ads-software.com/plugins/custom-registration-form-builder-with-submission-manager/
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
- The topic ‘Escaping attributes’ is closed to new replies.