Hi @sarah@hexagonwebworks.com
Good question. In short, I’m not completely sure.
ACF does not perform any PHP based sanitation of the values being saved, but I have a feeling that the WP functions would.
ACF uses the WP functions such as update_postmeta to save a value. Perhaps you could look into that function for the answer?
Thanks
E
