Merge pull request #120 from studiopress/update/deprecated-flag

Add some sanitization back in
studiopress · May 6, 2022 · e706c34 · e706c34
2 parents 7a1035b + b16a986
commit e706c34
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 7 deletions.
diff --git a/php/Admin/Upgrade.php b/php/Admin/Upgrade.php
@@ -52,10 +52,8 @@ public function enqueue_scripts() {
 			return;
 		}
 
-		$page = filter_input( INPUT_GET, 'page' );
-
 		// Enqueue scripts and styles on the edit screen of the Block post type.
-		if ( $this->slug === $page ) {
+		if ( filter_input( INPUT_GET, 'page' ) === $this->slug ) {
 			wp_enqueue_style(
 				$this->slug,
 				$this->plugin->get_url( 'css/admin.upgrade.css' ),

diff --git a/php/Blocks/Controls/InnerBlocks.php b/php/Blocks/Controls/InnerBlocks.php
@@ -53,7 +53,7 @@ public function validate( $value, $echo ) {
 		$content = genesis_custom_blocks()->loader->get_data( 'content' );
 
 		return empty( $content )
-			? urldecode( filter_input( INPUT_GET, 'inner_blocks' ) )
+			? urldecode( wp_strip_all_tags( filter_input( INPUT_GET, 'inner_blocks' ) ) )
 			: $content;
 	}
 }
diff --git a/php/Blocks/Loader.php b/php/Blocks/Loader.php
@@ -330,9 +330,7 @@ protected function render_block_template( $block, $attributes, $content ) {
 		$type = 'block';
 
 		// This is hacky, but the editor doesn't send the original request along.
-		$context = filter_input( INPUT_GET, 'context' );
-
-		if ( 'edit' === $context ) {
+		if ( 'edit' === filter_input( INPUT_GET, 'context' ) ) {
 			$type = [ 'preview', 'block' ];
 		}