Sanitize webhook URL

Automattic · Jun 24, 2024 · a540e18 · a540e18
1 parent 902bc04
commit a540e18
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/modules/notifications/notifications.php b/modules/notifications/notifications.php
@@ -1420,6 +1420,12 @@ public function settings_validate( $new_options ) {
 				$new_options['webhook_url'] = '';
 			}
 
+			if ( esc_url_raw( $new_options['webhook_url'] ) !== $new_options['webhook_url'] ) {
+				$new_options['webhook_url'] = '';
+			} else {
+				$new_options['webhook_url'] = esc_url_raw( $new_options['webhook_url'] );
+			}
+
 			return $new_options;
 		}