Sanitize and unslash all inputs

2021-11-14 13:49:51 +09:00
parent 8873e5adeb
commit a605d7ed1a
30 changed files with 98 additions and 98 deletions
--- a/modules/sportspress-tutorials.php
+++ b/modules/sportspress-tutorials.php
@@ -194,7 +194,7 @@ if ( ! class_exists( 'SportsPress_Tutorials' ) ) :
 					'advanced'  => esc_attr__( 'Advanced', 'sportspress' ),
 				)
 			);
-			if ( isset( $_GET['tab'] ) && array_key_exists( $_GET['tab'], $tabs ) ) {
+			if ( isset( $_GET['tab'] ) && array_key_exists( wp_unslash( $_GET['tab'] ), $tabs ) ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
 				$current_tab = sanitize_key( $_GET['tab'] );
 			} else {
 				$current_tab = key( $tabs );