From a8f08680fd1650919ab7f904345944b61d62de49 Mon Sep 17 00:00:00 2001 From: Wilmerson da Silva Date: Fri, 2 Aug 2024 17:24:48 -0300 Subject: [PATCH] Fix error message sanitization --- lib/WP_Auth0_Email_Verification.php | 2 +- lib/WP_Auth0_LoginManager.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/WP_Auth0_Email_Verification.php b/lib/WP_Auth0_Email_Verification.php index 3f8ef97b..0ffec456 100644 --- a/lib/WP_Auth0_Email_Verification.php +++ b/lib/WP_Auth0_Email_Verification.php @@ -51,6 +51,6 @@ public static function render_die($userinfo) $html = apply_filters('auth0_verify_email_page', $html, $userinfo, ''); - wp_die(wp_kses($html, ['p' => [], 'a' => ['id' => true, 'href' => true], 'script' => ['src' => true]])); + wp_die(wp_kses_post($html)); } } diff --git a/lib/WP_Auth0_LoginManager.php b/lib/WP_Auth0_LoginManager.php index fcc162f9..3234ab21 100755 --- a/lib/WP_Auth0_LoginManager.php +++ b/lib/WP_Auth0_LoginManager.php @@ -616,7 +616,7 @@ protected function die_on_login($msg = '', $code = 0) $html = apply_filters('auth0_die_on_login_output', esc_html($html), esc_html($msg), esc_html($code), false); - wp_die(wp_kses($html, ['br' => [], 'a' => ['href' => []]])); + wp_die(wp_kses_post($html)); } /**