Fix: sanitize migration param url (#7634)

Co-authored-by: Jon Waldstein <jonwaldstein@jwaldstein-mbp.mynetworksettings.com>
impress-org · Dec 3, 2024 · 4fb99af · 4fb99af
1 parent a20c9d8
commit 4fb99af
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/Framework/Migrations/Controllers/ManualMigration.php b/src/Framework/Migrations/Controllers/ManualMigration.php
@@ -36,16 +36,17 @@ public function __construct(MigrationsRegister $migrationsRegister)
     }
 
     /**
+     * @unreleased sanitize params
      * @since 2.9.2
      */
     public function __invoke()
     {
         if ( ! empty($_GET['give-run-migration'])) {
-            $migrationToRun = $_GET['give-run-migration'];
+            $migrationToRun = give_clean($_GET['give-run-migration']);
         }
 
         if ( ! empty($_GET['give-clear-update'])) {
-            $migrationToClear = $_GET['give-clear-update'];
+            $migrationToClear = give_clean($_GET['give-clear-update']);
         }
 
         $hasMigration = isset($migrationToRun) || isset($migrationToClear);