Sanitize tab key in tutorials

2021-11-05 22:23:56 +09:00
parent 47d62a9a81
commit 9a35699d78
1 changed files with 1 additions and 1 deletions
--- a/modules/sportspress-tutorials.php
+++ b/modules/sportspress-tutorials.php
@@ -145,7 +145,7 @@ class SportsPress_Tutorials {
 			'advanced' => __( 'Advanced', 'sportspress' ),
 		) );
 		if ( isset( $_GET['tab'] ) && array_key_exists( $_GET['tab'], $tabs ) ) {
-			$current_tab = $_GET['tab'];
+			$current_tab = sanitize_key( $_GET['tab'] );
 		} else {
 			$current_tab = key( $tabs );
 		}