added some sanitize_callbacks

Author: pfefferle

includes/rest/class-collection.php

@@ -298,8 +298,9 @@ public static function request_parameters_for_replies() {
 		);
 
 		$params['id'] = array(
-			'required' => true,
-			'type'     => 'string',
+			'required'          => true,
+			'type'              => 'string',
+			'sanitize_callback' => 'sanitize_text_field',
 		);
 
 		return $params;

includes/rest/class-server.php

@@ -200,9 +200,9 @@ public static function request_parameter_order( $order, $request ) {
 			return $order;
 		}
 
-		$type = $request->get_method();
+		$method = $request->get_method();
 
-		if ( WP_REST_Server::CREATABLE !== $type ) {
+		if ( WP_REST_Server::CREATABLE !== $method ) {
 			return $order;
 		}
 

includes/rest/class-webfinger.php

@@ -88,9 +88,10 @@ public static function request_parameters() {
 		$params = array();
 
 		$params['resource'] = array(
-			'required' => true,
-			'type'     => 'string',
-			'pattern'  => '^(acct:)|^(https?://)(.+)$',
+			'required'          => true,
+			'type'              => 'string',
+			'pattern'           => '^(acct:)|^(https?://)(.+)$',
+			'sanitize_callback' => 'sanitize_text_field',
 		);
 
 		return $params;