diff --git a/src/bp-templates/bp-nouveau/readylaunch/groups/single/admin/group-settings.php b/src/bp-templates/bp-nouveau/readylaunch/groups/single/admin/group-settings.php index 5895c43709..d9153cece9 100644 --- a/src/bp-templates/bp-nouveau/readylaunch/groups/single/admin/group-settings.php +++ b/src/bp-templates/bp-nouveau/readylaunch/groups/single/admin/group-settings.php @@ -221,6 +221,16 @@ ` as they're not part of the post-content + // allowed-tags list, so a dedicated allowlist is used instead to keep these options intact. + $group_type_option_allowed_html = array( + 'option' => array( + 'for' => true, + 'value' => true, + 'selected' => true, + ), + ); + foreach ( $group_types as $group_type ) : $group_option = sprintf( @@ -249,19 +259,19 @@ if ( ! empty( $include_group_type ) ) { if ( in_array( $group_type->name, $include_group_type, true ) ) { - echo wp_kses_post( $group_option ); + echo wp_kses( $group_option, $group_type_option_allowed_html ); } } else { - echo wp_kses_post( $group_option ); + echo wp_kses( $group_option, $group_type_option_allowed_html ); } } else { - echo wp_kses_post( $group_option ); + echo wp_kses( $group_option, $group_type_option_allowed_html ); } } else { - echo wp_kses_post( $group_option ); + echo wp_kses( $group_option, $group_type_option_allowed_html ); } } else { - echo wp_kses_post( $group_option ); + echo wp_kses( $group_option, $group_type_option_allowed_html ); } endforeach; ?>