Sanitize fields

Automattic · Oct 4, 2023 · a1c4e4f · a1c4e4f
1 parent 51b83bb
commit a1c4e4f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/prometheus-collectors/class-potential-multi-dataset-queries-collector.php b/prometheus-collectors/class-potential-multi-dataset-queries-collector.php
@@ -59,8 +59,8 @@ public function sql_query_log( $query ): void {
 					'message'  => 'Potential multi dataset query detected',
 					'blog_id'  => get_current_blog_id(),
 					'extra'    => [
-						'uri'       => $_SERVER['REQUEST_URI'] ?? '',
-						'method'    => $_SERVER['REQUEST_METHOD'] ?? '',
+						'uri'       => isset( $_SERVER['REQUEST_URI'] ) ? sanitize_url( $_SERVER['REQUEST_URI'] ) : '',
+						'method'    => isset( $_SERVER['REQUEST_METHOD'] ) ? sanitize_text_field( $_SERVER['REQUEST_METHOD'] ) : '',
 						'backtrace' => $backtrace,
 					],
 				]