mahowell

Using sanitize_text_field can break site_token

3

If, for example, the sequence `%B2` exists somewhere in the site_token, `sanitize_text_field( $_POST['site_token'] )` will strip it out breaking the site_token. In class-syndication-wp-rest-client.php: `update_post_meta( $site_ID, 'syn_site_token', push_syndicate_encrypt( sanitize_text_field( $_POST['site_token'] )...