Sanitize 'context' parameter

It's currently only used in conditions, but plan ahead.
joedolson · Nov 17, 2023 · dade53e · dade53e
1 parent 7bc46a5
commit dade53e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/my-calendar-api.php b/src/my-calendar-api.php
@@ -100,7 +100,7 @@ function mc_format_api( $data, $format ) {
 			mc_api_format_csv( $data );
 			break;
 		case 'ical':
-			$context = ( isset( $_GET['context'] ) ) ? $_GET['context'] : 'google';
+			$context = ( isset( $_GET['context'] ) ) ? sanitize_text_field( $_GET['context'] ) : 'google';
 			mc_api_format_ical( $data, $context );
 			break;
 	}