Remove FILTER_SANITIZE_STRING usage.

pronamic · Dec 9, 2022 · 1011701 · 1011701
1 parent ded93b7
commit 1011701
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/views/page-payment.php b/views/page-payment.php
@@ -13,7 +13,8 @@
 use Pronamic\WordPress\Mollie\Client;
 use Pronamic\WordPress\Pay\Admin\AdminPaymentPostType;
 
-$mollie_payment_id = \filter_input( INPUT_GET, 'id', FILTER_SANITIZE_STRING );
+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce is not necessary because this parameter does not trigger an action
+$mollie_payment_id = \array_key_exists( 'id', $_GET ) ? \sanitize_text_field( \wp_unslash( $_GET['id'] ) ) : '';
 
 $mollie_payment = null;