Support noscript for unfiltered_html

valendesigns · May 16, 2019 · 2cf1e14 · 2cf1e14
1 parent 17840a6
commit 2cf1e14
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/includes/ot-functions-admin.php b/includes/ot-functions-admin.php
@@ -566,9 +566,10 @@ function ot_validate_setting( $input, $type, $field_id, $wmpl_id = '' ) {
 			$filter = function( $tags, $context ) {
 				if ( 'post' === $context ) {
 					if ( current_user_can( 'unfiltered_html' ) || true === OT_ALLOW_UNFILTERED_HTML ) {
-						$tags['script'] = array_fill_keys( array( 'async', 'charset', 'defer', 'src', 'type' ), 1 );
-						$tags['style']  = array_fill_keys( array( 'media', 'type' ), 1 );
-						$tags['iframe'] = array_fill_keys( array( 'align', 'frameborder', 'height', 'longdesc', 'marginheight', 'marginwidth', 'name', 'sandbox', 'scrolling', 'src', 'srcdoc', 'width' ), 1 );
+						$tags['script']   = array_fill_keys( array( 'async', 'charset', 'defer', 'src', 'type' ), 1 );
+						$tags['style']    = array_fill_keys( array( 'media', 'type' ), 1 );
+						$tags['iframe']   = array_fill_keys( array( 'align', 'frameborder', 'height', 'longdesc', 'marginheight', 'marginwidth', 'name', 'sandbox', 'scrolling', 'src', 'srcdoc', 'width' ), 1 );
+						$tags['noscript'] = array();
 
 						$tags = apply_filters( 'ot_allowed_html', $tags );
 					}

diff --git a/readme.md b/readme.md
@@ -126,7 +126,8 @@ The most likely scenario is your theme already has OptionTree installed in Theme
 ## Changelog ##
 
 ### 2.7.1 ###
-* Hotfix - Fix error cannot redeclare `_sanitize_recursive()`. props @shramee
+* Hotfix - Fix error cannot redeclare `_sanitize_recursive()`. props @shramee
+* Hotfix - Ensure `noscript` is supported for users with `unfiltered_html` capabilities.
 
 ### 2.7.0 ###
 * Require PHP 5.3+

diff --git a/readme.txt b/readme.txt
@@ -128,6 +128,7 @@ The most likely scenario is your theme already has OptionTree installed in Theme
 
 = 2.7.1 =
 * Hotfix - Fix error cannot redeclare `_sanitize_recursive()`. props @shramee
+* Hotfix - Ensure `noscript` is supported for users with `unfiltered_html` capabilities.
 
 = 2.7.0 =
 * Require PHP 5.3+