From d2059d91a9d3f192544fc5eac7b9b287cb536859 Mon Sep 17 00:00:00 2001
From: Darren <darrenwestwood86@gmail.com>
Date: Tue, 1 Jun 2021 14:27:17 +0200
Subject: [PATCH] Secure filter_by attribute using esc_attr

---
 blockonomics-woocommerce.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/blockonomics-woocommerce.php b/blockonomics-woocommerce.php
index f3f250eb..b465ff6b 100755
--- a/blockonomics-woocommerce.php
+++ b/blockonomics-woocommerce.php
@@ -75,7 +75,7 @@ function filter_orders() {
 		global $typenow;
 		if ( 'shop_order' === $typenow ) {
 			?>
-			<input size='26' value="<?php if(isset( $_GET['filter_by'] )) echo(sanitize_text_field($_GET['filter_by'])); ?>" type='name' placeholder='Filter by crypto address/txid' name='filter_by'>
+			<input size='26' value="<?php if(isset( $_GET['filter_by'] )) echo(esc_attr($_GET['filter_by'])); ?>" type='name' placeholder='Filter by crypto address/txid' name='filter_by'>
 			<?php
 		}
 	}