Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use wp_unslash() when displaying search string on orders.

This commit is contained in:
Scott Basgaard 2013-11-18 16:32:47 +01:00
parent faf64a4d96
commit 96fe4aae0b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
includes/admin/post-types/class-wc-admin-cpt-shop_order.php
View File

@ -591,7 +591,7 @@ class WC_Admin_CPT_Shop_Order extends WC_Admin_CPT {
if ( $typenow != 'shop_order' ) return $query; if ( $typenow != 'shop_order' ) return $query;
if ( ! get_query_var( 'shop_order_search' ) ) return $query; if ( ! get_query_var( 'shop_order_search' ) ) return $query;
return $_GET['s']; return wp_unslash( $_GET['s'] );
} }
/** /**