← All changes | views/builder/tabs.php +1 -1 3.7.2 → 3.8.0 View file →

		@@ -3,9 +3,9 @@
3	3	<?php
4	4	/**
5	5	* @var array $template_types
6	6	*/
7		- $__type = isset($_GET['type']) ? $_GET['type'] : 'all';
	7	+ $__type = isset($_GET['type']) ? sanitize_key(wp_unslash($_GET['type'])) : 'all';
8	8	foreach ( $template_types as $typename => $type ) {
9	9	$classes = esc_attr( $typename );
10	10	$classes .= $__type === $typename ? ' active' : '';
11	11	echo wp_kses( sprintf( '<li class="nav-tab %1$s"><a href="%2$s">%3$s</a></li>', $classes, esc_url( $type['url'] ), $type['label'] ), 'post' );