fixes sanitization for referrer in notifications as well

BoldGrid · Mar 4, 2024 · f1b6ecf · f1b6ecf
1 parent b2bd1cc
commit f1b6ecf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/class-notification.php b/includes/class-notification.php
@@ -430,7 +430,7 @@ public function get_merge_value( $tag ) {
                 break;
 
             case 'url_referer':
-                return isset( $_SERVER['HTTP_REFERER'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : '';
+                return isset( $_SERVER['HTTP_REFERER'] ) ? sanitize_url( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : '';
                 break;
 
             case 'url_login':