feat: Sanitize settings page get input

WPEzPz · Nov 16, 2021 · 1276413 · 1276413
1 parent 8fd739b
commit 1276413
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/views/settings.php b/backend/views/settings.php
@@ -1,4 +1,4 @@
-<?php $fragment = isset( $_GET['tab'] ) ? $_GET['tab'] : 'customizing-branding'; ?>
+<?php $fragment = isset( $_GET['tab'] ) ? sanitize_text_field( $_GET['tab'] ) : 'customizing-branding'; ?>
 
 <div class="wrap ezpz-tweaks-tabs">
 	<h2><img src="<?php echo EZPZ_TWEAKS_PLUGIN_ROOT_URL . 'assets/img/EzPzTweaks-logo.svg' ?>" style="width: 50px;vertical-align: middle;padding: 15px;"><?php echo EZPZ_TWEAKS_NAME ?></h2>