| @@ -58,9 +58,18 @@ | ||
| 58 | 58 | <a href="#" class="frm_inbox_dismiss"><?php esc_html_e( 'Dismiss', 'formidable' ); ?></a> |
| 59 | 59 | <?php endif; ?> |
| 60 | 60 | </div> |
| 61 | 61 | <p><?php echo wp_kses_post( $message['message'] ); ?></p> |
| 62 | - <?php echo wp_kses( $message['cta'], array( 'a' => array( 'href' => true ) ) ); ?> | |
| 62 | + <?php | |
| 63 | + $cta_allowed_html = array( | |
| 64 | + 'a' => array( | |
| 65 | + 'href' => true, | |
| 66 | + 'target' => true, | |
| 67 | + 'rel' => true, | |
| 68 | + ), | |
| 69 | + ); | |
| 70 | + echo wp_kses( $message['cta'], $cta_allowed_html ); | |
| 71 | + ?> | |
| 63 | 72 | </div> |
| 64 | 73 | <?php endforeach; ?> |
| 65 | 74 | |
| 66 | 75 | </div> |
