[wp-trac] [WordPress Trac] #63320: Sanitize key parameter in activation flow to enhance security

[WordPress Trac]

#63320: Sanitize key parameter in activation flow to enhance security
-------------------------------------------------+-------------------------
 Reporter:  khushipatel15                        |      Owner:  (none)
     Type:  enhancement                          |     Status:  new
 Priority:  normal                               |  Milestone:  Awaiting
                                                 |  Review
Component:  Security                             |    Version:  6.8
 Severity:  normal                               |   Keywords:  has-patch
  Focuses:  performance, privacy, coding-        |
  standards, php-compatibility                   |
-------------------------------------------------+-------------------------
 Currently, the key parameter received via $_GET or $_POST is used directly
 without sanitization in the activation flow. This patch introduces the use
 of sanitize_text_field() when retrieving the key from user input to ensure
 the data is cleaned before further processing.

 Changes made:
 Added sanitize_text_field() for both $_GET['key'] and $_POST['key'] when
 assigning the $key variable.
 This ensures that any potentially unsafe characters are stripped out,
 reducing the risk of unexpected behavior or misuse.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63320>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform