| @@ -416,9 +416,11 @@ | ||
| 416 | 416 | $request_params['custom_form'], |
| 417 | 417 | $request_params['aggregate_resource_id_str'] |
| 418 | 418 | ); |
| 419 | 419 | if ( ! is_wp_error( $classic_context ) ) { |
| 420 | - $request_params['allow_past'] = ! empty( $classic_context['allow_past'] ) ? 1 : 0; | |
| 420 | + $request_params['allow_past'] = ! empty( $classic_context['allow_past'] ) ? 1 : 0; | |
| 421 | + // Use the signed canonical set so equivalent wire shapes cannot change availability input. | |
| 422 | + $request_params['aggregate_resource_id_str'] = implode( ',', $classic_context['aggregate_resource_ids'] ); | |
| 421 | 423 | $request_params['dates_to_check'] = array( |
| 422 | 424 | $classic_context['calendar_dates_start'], |
| 423 | 425 | $classic_context['calendar_dates_end'], |
| 424 | 426 | ); |
