← All changes
|
includes/shortcodes/class-charitable-login-shortcode.php
+4
-2
1.7.0.3
→
1.8.13
View file →
| @@ -3,9 +3,9 @@ | ||
| 3 | 3 | * Login shortcode class. |
| 4 | 4 | * |
| 5 | 5 | * @package Charitable/Shortcodes/Login |
| 6 | 6 | * @author David Bisset |
| 7 | - * @copyright Copyright (c) 2022, WP Charitable LLC | |
| 7 | + * @copyright Copyright (c) 2023, WP Charitable LLC | |
| 8 | 8 | * @license http://opensource.org/licenses/gpl-2.0.php GNU Public License |
| 9 | 9 | * @since 1.0.0 |
| 10 | 10 | * @version 1.6.51 |
| 11 | 11 | */ |
| @@ -114,10 +114,12 @@ | ||
| 114 | 114 | 'redirect' => $args['redirect'], |
| 115 | 115 | 'charitable' => true, |
| 116 | 116 | ); |
| 117 | 117 | |
| 118 | + // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display only, no action | |
| 118 | 119 | if ( isset( $_GET['username'] ) ) { |
| 119 | - $default['value_username'] = str_replace( ' ', '+', $_GET['username'] ); | |
| 120 | + // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display only, no action | |
| 121 | + $default['value_username'] = str_replace( ' ', '+', sanitize_text_field( wp_unslash( $_GET['username'] ) ) ); | |
| 120 | 122 | } |
| 121 | 123 | |
| 122 | 124 | /** |
| 123 | 125 | * Filter the arguments to pass to wp_login_form(). |