| @@ -29,9 +29,9 @@ | ||
| 29 | 29 | if (empty($url)) { |
| 30 | 30 | $url = home_url(); |
| 31 | 31 | } |
| 32 | 32 | |
| 33 | - $host = !empty($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : ''; | |
| 33 | + $host = !empty($_SERVER['HTTP_HOST']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_HOST'])) : ''; | |
| 34 | 34 | berqReverseProxyCache::purge_varnish_cache($url, ['127.0.0.1', $host], 'URLPURGE'); |
| 35 | 35 | return; |
| 36 | 36 | |
| 37 | 37 | $parse_url = parse_url($url); |
| @@ -63,9 +63,9 @@ | ||
| 63 | 63 | return; |
| 64 | 64 | } |
| 65 | 65 | |
| 66 | 66 | $url = home_url('/.*'); |
| 67 | - $host = !empty($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : ''; | |
| 67 | + $host = !empty($_SERVER['HTTP_HOST']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_HOST'])) : ''; | |
| 68 | 68 | berqReverseProxyCache::purge_varnish_cache($url, ['127.0.0.1', $host], 'PURGE'); |
| 69 | 69 | return; |
| 70 | 70 | |
| 71 | 71 | } |