Merge pull request #2753 from 10up/fix/2731

Strip slashes when saving features.
10up · May 12, 2022 · f1ed382 · f1ed382
2 parents 945eb52 + 183b86a
commit f1ed382
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/includes/dashboard.php b/includes/dashboard.php
@@ -421,6 +421,8 @@ function action_wp_ajax_ep_cancel_index() {
  * @since  2.2
  */
 function action_wp_ajax_ep_save_feature() {
+	$_POST = wp_unslash( $_POST );
+
 	if ( empty( $_POST['feature'] ) || empty( $_POST['settings'] ) || ! check_ajax_referer( 'ep_dashboard_nonce', 'nonce', false ) ) {
 		wp_send_json_error();
 		exit;