Meta Box

Form Shortcode Output Breakdown

Support › General › Form Shortcode Output BreakdownResolved

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • February 6, 2024 at 4:54 PM #44497
    UnakritiUnakriti
    Participant

    Hi Support,

    I have a CPT called Landing Pages with a mandatory Custom Field of Radio Button - it forces the user to select a contact form shortcode. The option values are specified as 3rd-party [shortcodes] - one each on a separate line. The customer selects the appropriate Radio Button and the form-shortcode is output on the frontend.

    However, the recent MB update (5.9.3 – 2024-02-02) broke down these third-party forms.

    As an emergency resolution, I have inserted the recommended snippet on youir Changelog page as add_filter( ‘rwmb_meta_shortcode_secure’, ‘__return_false’ );.

    The snippet "disables escaping". So, my questoin is - is using this snippet a security issue and if so, is there another way to allow form shortcodes without disabling the new security fix?

    Kind regards,

    February 6, 2024 at 11:10 PM #44504
    PeterPeter
    Moderator

    Hello,

    Please read more about the potential security issue here https://www.facebook.com/groups/metaboxusers/posts/1436653003619006/

    If you want to output the field value, please try to use the helper function rwmb_meta().

    February 10, 2024 at 7:48 PM #44533
    UnakritiUnakriti
    Participant

    Thank you.

    Ideally, I would like to output the shortcode value without using the snippet that disables escaping. Is there a way to render third-party shortcodes without assuming the risk? Could you please guide me how to achieve it?

    Kind regards,

    February 12, 2024 at 3:01 PM #44546
    PeterPeter
    Moderator

    Hello,

    I'm afraid that there isn't a way to render the third-party shortcode when using Meta Box shortcode without bypassing HTML filtering. It helps you to prevent security issues so please be more careful to use the shortcode.

    February 13, 2024 at 12:17 PM #44555
    UnakritiUnakriti
    Participant

    Got it, thanks Peter

  • Author
    Posts
Viewing 5 posts - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.