Changeset 60204

Timestamp:

04/28/2025 09:10:55 PM (3 months ago)

Author:

flixos90

Message:

Networks and Sites: Sanitize key parameter in wp-activate.php.

Props khushipatel15.
Fixes #63320.

File:

• trunk/src/wp-activate.php (modified) (1 diff)

trunk/src/wp-activate.php

@@ -30 +30 @@
     wp_die( __( 'A key value mismatch has been detected. Please follow the link provided in your activation email.' ), __( 'An error occurred during the activation' ), 400 );
 } elseif ( ! empty( $_GET['key'] ) ) {
-    $key = $_GET['key'];
+    $key = sanitize_text_field( $_GET['key'] );
 } elseif ( ! empty( $_POST['key'] ) ) {
-    $key = $_POST['key'];
+    $key = sanitize_text_field( $_POST['key'] );
 }