add missing sanitizations to blogname and tagline

yithemes · Aug 5, 2020 · bd918dd · bd918dd
1 parent 66980ed
commit bd918dd
Showing 1 changed file with 10 additions and 8 deletions.
diff --git a/inc/customizer/panels/site-identity.php b/inc/customizer/panels/site-identity.php
@@ -33,10 +33,11 @@
 $wp_customize->add_setting(
 	'blogname',
 	array(
-		'default'    => get_option( 'blogname' ),
-		'type'       => 'option',
-		'capability' => 'manage_options',
-		'priority'   => 10,
+		'default'           => get_option( 'blogname' ),
+		'type'              => 'option',
+		'capability'        => 'manage_options',
+		'priority'          => 10,
+		'sanitize_callback' => 'wp_filter_nohtml_kses',
 	)
 );
 
@@ -90,10 +91,11 @@
 $wp_customize->add_setting(
 	'blogdescription',
 	array(
-		'default'    => get_option( 'blogdescription' ),
-		'type'       => 'option',
-		'capability' => 'manage_options',
-		'priority'   => 100,
+		'default'           => get_option( 'blogdescription' ),
+		'type'              => 'option',
+		'capability'        => 'manage_options',
+		'priority'          => 100,
+		'sanitize_callback' => 'wp_filter_nohtml_kses',
 	)
 );