feat: sanitize data from payment form

TransbankDevelopers · May 29, 2024 · 3e9cf1c · 3e9cf1c
1 parent 39e5434
commit 3e9cf1c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugin/src/PaymentGateways/WC_Gateway_Transbank_Oneclick_Mall_REST.php b/plugin/src/PaymentGateways/WC_Gateway_Transbank_Oneclick_Mall_REST.php
@@ -338,7 +338,7 @@ public function form()
      */
     private function handleRequest(array $request, WC_Order $order)
     {
-        $paymentTokenId = $request["wc-{$this->id}-payment-token"] ?? null;
+        $paymentTokenId = wc_clean($request["wc-{$this->id}-payment-token"]) ?? null;
 
         if ($paymentTokenId === 'new' || is_null($paymentTokenId)) {
             return $this->handleInscription($order);