Add sanitize post type in case users use CamelCase in post type name. #…

…1109
wpmetabox · May 4, 2017 · 51dddec · 51dddec
1 parent e4b1653
commit 51dddec
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/inc/meta-box.php b/inc/meta-box.php
@@ -299,8 +299,8 @@ public static function normalize( $meta_box ) {
 			$meta_box['post_types'] = $meta_box['pages'];
 		}
 
-		// Make sure the post type is an array.
-		$meta_box['post_types'] = (array) $meta_box['post_types'];
+		// Make sure the post type is an array and is sanitized.
+		$meta_box['post_types'] = array_map( 'sanitize_key', (array) $meta_box['post_types'] );
 
 		return $meta_box;
 	}