Added sanitize data on create new template

elementor · Jan 19, 2020 · a31dcf4 · a31dcf4
1 parent af085e5
commit a31dcf4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/admin/admin.php b/core/admin/admin.php
@@ -650,7 +650,7 @@ public function admin_action_new_post() {
 		if ( empty( $_GET['template_type'] ) ) {
 			$type = 'post';
 		} else {
-			$type = $_GET['template_type']; // XSS ok.
+			$type = sanitize_text_field( $_GET['template_type'] );
 		}
 
 		$post_data = isset( $_GET['post_data'] ) ? $_GET['post_data'] : [];