You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are two different sanitization checks in this sniff. Only one of
them was considering that casting is a form of input sanitization. I’ve
moved the casting check out of the conditional it was in, and now the
`$is_casted` value is being checked for all sanitization checking paths.
Includes unit tests.
FixesWordPress#179
I think this is true in the XSS sniff, but not in
WordPress.VIP.ValidatedSanitizedInput
.For example:
This will be flagged, but it shouldn't be.
The text was updated successfully, but these errors were encountered: