Don't escape sign in template message entirely of HTML (#1532)

Automattic · Jun 27, 2018 · 0682401 · 0682401
1 parent 52f813a
commit 0682401
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/account-signin.php b/templates/account-signin.php
@@ -22,7 +22,7 @@
 		<div class="field account-sign-in">
 			<?php
 				$user = wp_get_current_user();
-				printf( esc_html__( 'You are currently signed in as <strong>%s</strong>.', 'wp-job-manager' ), esc_html( $user->user_login ) );
+				printf( wp_kses_post( __( 'You are currently signed in as <strong>%s</strong>.', 'wp-job-manager' ) ), esc_html( $user->user_login ) );
 			?>
 
 			<a class="button" href="<?php echo esc_url( apply_filters( 'submit_job_form_logout_url', wp_logout_url( get_permalink() ) ) ); ?>"><?php esc_html_e( 'Sign out', 'wp-job-manager' ); ?></a>