← All changes | inc/class-ps-conditional.php +1 -1 4.3.5 → 4.3.16 View file →

		@@ -51,9 +51,9 @@
51	51	*/
52	52	public static function is_valid_password( string $input, array $atts ) : bool {
53	53	// password.
54	54	if ( !empty( $atts['password'] ) ) {
55		- $hash = hash_hmac( 'sha256', esc_html( $atts['password'] ), get_option( 'passster_secure_key' ) );
	55	+ $hash = hash_hmac( 'sha256', wp_unslash( $atts['password'] ), get_option( 'passster_secure_key' ) );
56	56	if ( hash_equals( $hash, $input ) ) {
57	57	return true;
58	58	}
59	59	}