wp_kses_post() for consent text.

Automattic · Feb 11, 2019 · 89d53f0 · 89d53f0
1 parent 6961def
commit 89d53f0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/extensions/blocks/mailchimp/mailchimp.php b/extensions/blocks/mailchimp/mailchimp.php
@@ -67,7 +67,7 @@ function jetpack_mailchimp_block_load_assets( $attr ) {
 				</button>
 				<p>
 					<small>
-						<?php echo esc_html( $values['consentText'] ); ?>
+						<?php echo wp_kses_post( $values['consentText'] ); ?>
 					</small>
 				</p>
 			</form>