Use wc_clean instead

mollie · May 22, 2024 · f01ec93 · f01ec93
1 parent 093d7c0
commit f01ec93
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Gateway/MolliePaymentGateway.php b/src/Gateway/MolliePaymentGateway.php
@@ -1014,8 +1014,8 @@ public function onOrderReceivedText($text, $order)
     public function getSelectedIssuer(): ?string
     {
         $issuer_id = $this->pluginId . '_issuer_' . $this->id;
-
-        $postedIssuer = sanitize_text_field($_POST[$issuer_id] ?? '');
+        //phpcs:ignore WordPress.Security.NonceVerification
+        $postedIssuer = wc_clean(wp_unslash($_POST[$issuer_id] ?? ''));
         return !empty($postedIssuer) ? $postedIssuer : null;
     }