LINT

Automattic · Dec 20, 2024 · 2f48ae8 · 2f48ae8
1 parent 695e191
commit 2f48ae8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/projects/packages/woocommerce-analytics/src/class-universal.php b/projects/packages/woocommerce-analytics/src/class-universal.php
@@ -68,7 +68,7 @@ public function initialize_woocommerceanalytics_session() {
 		if ( ! isset( $_COOKIE['woocommerceanalytics_session'] ) ) {
 			$session_id         = wp_generate_uuid4();
 			$this->session_id   = $session_id;
-			$this->landing_page = esc_url_raw( wp_unslash( ( empty( $_SERVER['HTTPS'] ) ? 'http' : 'https' ) . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]" ) );
+			$this->landing_page = wp_unslash( sanitize_url( ( empty( $_SERVER['HTTPS'] ) ? 'http' : 'https' ) . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]" ) );
 			setcookie(
 				'woocommerceanalytics_session',
 				wp_json_encode(

diff --git a/projects/packages/woocommerce-analytics/src/class-woo-analytics-trait.php b/projects/packages/woocommerce-analytics/src/class-woo-analytics-trait.php
@@ -263,7 +263,7 @@ public function find_cart_checkout_content_sources() {
 	 * @return array Array of standard event props.
 	 */
 	public function get_common_properties() {
-		$session_data       = json_decode( wp_unslash( $_COOKIE['woocommerceanalytics_session'] ?? '' ), true ) ?? array();
+		$session_data       = json_decode( wp_unslash( sanitize_text_field( $_COOKIE['woocommerceanalytics_session'] ?? '' ) ), true ) ?? array();
 		$session_id         = sanitize_text_field( $session_data['session_id'] ?? $this->session_id );
 		$landing_page       = sanitize_url( $session_data['landing_page'] ?? $this->landing_page );
 		$site_info          = array(