added sanitize_callback on podcast_transcript post meta and removed w…

…p_kses_post from transcript template
10up · Sep 14, 2023 · 9264fa4 · 9264fa4
1 parent c915845
commit 9264fa4
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 7 deletions.
diff --git a/includes/datatypes.php b/includes/datatypes.php
@@ -115,9 +115,14 @@ function register_meta() {
 		'post',
 		'podcast_transcript',
 		array(
-			'show_in_rest' => true,
-			'type'         => 'string',
-			'single'       => true,
+			'show_in_rest'      => true,
+			'type'              => 'string',
+			'single'            => true,
+			'sanitize_callback' => function( $val ) {
+				return wp_kses_post( $val );
+			},
+		)
+	);
 
 	\register_term_meta(
 		'podcasting_podcasts',

diff --git a/templates/transcript.php b/templates/transcript.php
@@ -25,10 +25,8 @@
 $podcast_slug = get_query_var( 'podcasting-episode' );
 $post_object  = get_page_by_path( $podcast_slug, OBJECT, 'post' );
 if ( $post_object instanceof WP_Post ) {
-	echo wp_kses_post(
-		tenup_podcasting\transcripts\podcasting_wrap_unwrapped_text_in_paragraph(
-			get_post_meta( $post_object->ID, 'podcast_transcript', true )
-		)
+	echo tenup_podcasting\transcripts\podcasting_wrap_unwrapped_text_in_paragraph( // phpcs:ignore WordPress.Security.EscapeOutput 
+		get_post_meta( $post_object->ID, 'podcast_transcript', true )
 	);
 }
 ?>