fixed sanitize_selector function for multiple and callback selectors

nk-crew · May 11, 2024 · 8e5f015 · 8e5f015
1 parent 8b8a342
commit 8e5f015
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/classes/class-security.php b/classes/class-security.php
@@ -218,8 +218,14 @@ public static function sanitize_boolean( $attribute ) {
 	public static function sanitize_selector( $attribute, $control ) {
 		/**
 		 * Checking a selector for invalid options.
+		 * Exclude multiple and dynamically callback selectors.
 		 */
-		if ( ! array_key_exists( $attribute, $control['options'] ) ) {
+		if (
+			empty( $control['value_callback'] ) &&
+			! empty( $control['options'] ) &&
+			! $control['multiple'] &&
+			! array_key_exists( $attribute, $control['options'] )
+		) {
 			$attribute = $control['default'] ?? '';
 		}