Ticket #44590: 44590.patch

wp-admin/includes/user.php

@@ -642 +642 @@
  * @access private
  */
 function _wp_personal_data_handle_actions() {
-        if ( isset( $_POST['privacy_action_email_retry'] ) ) { // WPCS: input var ok.
+        if ( isset( $_POST['privacy_action_email_retry'] ) ) {
                 check_admin_referer( 'bulk-privacy_requests' );
 
-                $request_id = absint( current( array_keys( (array) wp_unslash( $_POST['privacy_action_email_retry'] ) ) ) ); // WPCS: input var ok, sanitization ok.
+                $request_id = absint( current( array_keys( (array) wp_unslash( $_POST['privacy_action_email_retry'] ) ) ) );
                 $result     = _wp_privacy_resend_request( $request_id );
 
                 if ( is_wp_error( $result ) ) {
@@ -664 +664 @@
                         );
                 }
         } elseif ( isset( $_POST['action'] ) ) {
-                $action = isset( $_POST['action'] ) ? sanitize_key( wp_unslash( $_POST['action'] ) ) : ''; // WPCS: input var ok, CSRF ok.
+                $action = isset( $_POST['action'] ) ? sanitize_key( wp_unslash( $_POST['action'] ) ) : '';
 
                 switch ( $action ) {
                         case 'add_export_personal_data_request':
@@ -671 +671 @@
                         case 'add_remove_personal_data_request':
                                 check_admin_referer( 'personal-data-request' );
 
-                                if ( ! isset( $_POST['type_of_action'], $_POST['username_or_email_to_export'] ) ) { // WPCS: input var ok.
+                                if ( ! isset( $_POST['type_of_action'], $_POST['username_or_email_to_export'] ) ) {
                                         add_settings_error(
                                                 'action_type',
                                                 'action_type',
@@ -679 +679 @@
                                                 'error'
                                         );
                                 }
-                                $action_type               = sanitize_text_field( wp_unslash( $_POST['type_of_action'] ) ); // WPCS: input var ok.
-                                $username_or_email_address = sanitize_text_field( wp_unslash( $_POST['username_or_email_to_export'] ) ); // WPCS: input var ok.
+                                $action_type               = sanitize_text_field( wp_unslash( $_POST['type_of_action'] ) );
+                                $username_or_email_address = sanitize_text_field( wp_unslash( $_POST['username_or_email_to_export'] ) );
                                 $email_address             = '';
 
                                 if ( ! in_array( $action_type, _wp_privacy_action_request_types(), true ) ) {
@@ -1161 +1161 @@
          */
         public function process_bulk_action() {
                 $action      = $this->current_action();
-                $request_ids = isset( $_REQUEST['request_id'] ) ? wp_parse_id_list( wp_unslash( $_REQUEST['request_id'] ) ) : array(); // WPCS: input var ok, CSRF ok.
+                $request_ids = isset( $_REQUEST['request_id'] ) ? wp_parse_id_list( wp_unslash( $_REQUEST['request_id'] ) ) : array();
+                
                 $count       = 0;
 
                 if ( $request_ids ) {