| @@ -45,9 +45,9 @@ | ||
| 45 | 45 | ] |
| 46 | 46 | ]; |
| 47 | 47 | |
| 48 | 48 | // Get active tab |
| 49 | -$active_tab = isset($_GET['tab']) ? sanitize_text_field($_GET['tab']) : 'seo_metadata'; | |
| 49 | +$active_tab = isset($_GET['tab']) ? sanitize_text_field(wp_unslash($_GET['tab'])) : 'seo_metadata'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only, allow-listed tab selection | |
| 50 | 50 | if (!array_key_exists($active_tab, $sections)) { |
| 51 | 51 | $active_tab = 'seo_metadata'; |
| 52 | 52 | } |
| 53 | 53 | ?> |