feat: Secure admin menu request input

WPEzPz · Nov 14, 2021 · d41ea41 · d41ea41
1 parent 2872af3
commit d41ea41
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/Admin_Menu_Editor.php b/backend/Admin_Menu_Editor.php
@@ -113,7 +113,7 @@ public function get_admin_menu() {
 	 * just like WordPress uses it in the backend.
 	 */
 	public function update_menu() {
-		$menu    = $_REQUEST['adminMenu'];
+		$menu    = ezpz_tweaks_recursive_sanitize( $_REQUEST['adminMenu'] );
 		$items   = array();
 		$submenu = array();