Reinstate escaping HTML in gap fill questions

Automattic · Nov 15, 2018 · 6a62a87 · 6a62a87
1 parent e153b44
commit 6a62a87
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/templates/single-quiz/question-type-gap-fill.php b/templates/single-quiz/question-type-gap-fill.php
@@ -26,7 +26,7 @@
 
     <span class="gapfill-answer-pre">
 
-        <?php echo wp_kses_post( apply_filters( 'sensei_answer_text', $question_data[ 'gapfill_pre' ] ) ); ?>
+        <?php echo wp_kses_post( apply_filters( 'sensei_answer_text', esc_html( $question_data[ 'gapfill_pre' ] ) ) ); ?>
 
         <input type="text" id="<?php echo esc_attr( 'question_' .  $question_data[ 'ID' ]  ); ?>"
                name="<?php echo esc_attr( 'sensei_question[' . $question_data[ 'ID' ] . ']' ); ?>"
@@ -35,7 +35,7 @@ class="gapfill-answer-gap" />
 
         <span class="gapfill-answer-post">
 
-            <?php echo wp_kses_post( apply_filters( 'sensei_answer_text', $question_data[ 'gapfill_post' ] ) ); ?>
+            <?php echo wp_kses_post( apply_filters( 'sensei_answer_text', esc_html( $question_data[ 'gapfill_post' ] ) ) ); ?>
 
         </span>