fix (kses): only do this when the user can edit posts

gambitph · Sep 26, 2024 · a818959 · a818959
1 parent d2c090b
commit a818959
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/kses.php b/src/kses.php
@@ -26,6 +26,11 @@
  * @return array Modified HTML tags & attributes.
  */
 function stackable_allow_wp_kses_allowed_html( $tags, $context ) {
+	// Only allow these tags if the user can edit posts.
+	if ( ! current_user_can( 'edit_posts' ) ) {
+		return $tags;
+	}
+
     $tags['style'] = array(
         'id' => true,
         'class' => true,