Sanitise input

tlamedia · Oct 15, 2024 · d111690 · d111690
1 parent 8848053
commit d111690
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Installation/AutomaticUpdates.php b/src/Installation/AutomaticUpdates.php
@@ -58,8 +58,8 @@ public static function instance(): self {
 	public function wp_option_updated( $option, $value, $old_value = [] ): void {
 		if ( defined( 'DOING_AJAX' ) && DOING_AJAX && ! empty( $_POST['asset'] ) && ! empty( $_POST['state'] ) ) { // @phpcs:ignore WordPress.Security.NonceVerification.Missing
 			// Option is being updated by the ajax request performed when using the enable/disable auto-updates links on the plugins page.
-			$asset = sanitize_text_field( urldecode( $_POST['asset'] ) ); // @phpcs:ignore WordPress.Security.NonceVerification.Missing
-			if ( $asset !== GTMKIT_BASENAME ) {
+
+			if ( sanitize_text_field( $_POST['asset'] ) !== GTMKIT_BASENAME ) { // @phpcs:ignore WordPress.Security.NonceVerification.Missing
 				return;
 			}