Input-Fields removed form Templates

Thanks for the bug report and that is due to a security issue. I have fixed the issue, can you download the dev version https://github.com/lesterchan/wp-polls/archive/master.zip and let me know if it works?

Looks fine ?? Thank you!

Wow thanks Lester, this works for me!

Thanks released 2.73.6 that fixes this =)

The fix is only applied to the “poll_template_votebody” & “poll_template_votefooter” fields. All other fields still have this issue, causing elements to be removed.

The solution as is now is not that flexible. Could you either disable the stripping of all tags, to provide maximum flexibility or provide actual template files?

@timwuyts: I can’t disable it because of security issues, I only can whitelist and only these two fields needs an input field based on the default template?

What other fields you need and the reason behind it, so I can whitelist more fields?

The following fields also use the “onclick” attribute (by default): poll_template_resultfooter, poll_template_resultfooter2

I try to keep the template as close as possible to the original, but if someone would want to make heavy customizations, then the problem could occur as well in the other fields.

Fixed it https://github.com/lesterchan/wp-polls/archive/master.zip =)

If any person needs more field, just tell me the reason and will gladly whitelist it =)