Sanitize importer delimiter

This commit is contained in:
Brian Miyaji
2021-11-05 22:24:22 +09:00
parent 9ca0c195c4
commit f3ee15c627

View File

@@ -47,7 +47,7 @@ if ( class_exists( 'WP_Importer' ) ) {
$this->header();
if ( ! empty( $_POST['delimiter'] ) )
$this->delimiter = stripslashes( trim( $_POST['delimiter'] ) );
$this->delimiter = stripslashes( trim( sanitize_text_field( $_POST['delimiter'] ) ) );
if ( ! $this->delimiter )
$this->delimiter = ',';