Strip slashes when saving features. Fixes #2731.

10up · May 11, 2022 · 183b86a · 183b86a
1 parent 8fc0cd5
commit 183b86a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/includes/dashboard.php b/includes/dashboard.php
@@ -421,6 +421,8 @@ function action_wp_ajax_ep_cancel_index() {
  * @since  2.2
  */
 function action_wp_ajax_ep_save_feature() {
+	$_POST = wp_unslash( $_POST );
+
 	if ( empty( $_POST['feature'] ) || empty( $_POST['settings'] ) || ! check_ajax_referer( 'ep_dashboard_nonce', 'nonce', false ) ) {
 		wp_send_json_error();
 		exit;