Allow data-wp-action and data-wp-nonce through wp_kses in Settings Form

get_allowed_html() was missing data-wp-action and data-wp-nonce for
input and select elements. wp_kses stripped these attributes, so
TomSelect could not read the action/nonce off the element and sent
AJAX requests without them.

Author: ajaydsouza

includes/admin/settings/class-settings-form.php

@@ -216,6 +216,8 @@ protected function get_allowed_html(): array {
 				'autocomplete'     => true,
 				// Tom Select data attributes (built-in Settings API feature).
 				'data-wp-prefix'   => true,
+				'data-wp-action'   => true,
+				'data-wp-nonce'    => true,
 				'data-wp-endpoint' => true,
 				'data-ts-config'   => true,
 			),
@@ -230,6 +232,8 @@ protected function get_allowed_html(): array {
 				'autocomplete'     => true,
 				// Tom Select data attributes (built-in Settings API feature).
 				'data-wp-prefix'   => true,
+				'data-wp-action'   => true,
+				'data-wp-nonce'    => true,
 				'data-wp-endpoint' => true,
 				'data-ts-config'   => true,
 			),