From e09b26d85a8177f51e07ebc8876d6e1eeb064196 Mon Sep 17 00:00:00 2001
From: Brian Miyaji <brian@themeboy.com>
Date: Tue, 9 Nov 2021 03:44:19 +0900
Subject: [PATCH] Add sanitization to overview

---
 modules/sportspress-overview.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/sportspress-overview.php b/modules/sportspress-overview.php
index 44e25d2a..532e7eac 100644
--- a/modules/sportspress-overview.php
+++ b/modules/sportspress-overview.php
@@ -117,7 +117,7 @@ class SportsPress_Overview {
 						<?php endforeach; ?>
 					</ul>
 
-				<?php elseif ( ! isset( $_GET['type'] ) ): $taxonomy = $_GET['taxonomy']; $taxonomy_object = get_taxonomy( $taxonomy ); ?>
+				<?php elseif ( ! isset( $_GET['type'] ) ): $taxonomy = sanitize_key( $_GET['taxonomy'] ); $taxonomy_object = get_taxonomy( $taxonomy ); ?>
 						
 					<?php $post_types = apply_filters( 'sportspress_sitemap_taxonomy_post_types', $taxonomy_object->object_type, $taxonomy ); ?>
 
@@ -272,7 +272,7 @@ class SportsPress_Overview {
 
 					<?php endif; ?>
 
-				<?php elseif ( ! isset( $_GET['taxonomy'] ) ): $post_type = $_GET['type']; // Post type archive ?>
+				<?php elseif ( ! isset( $_GET['taxonomy'] ) ): $post_type = sanitize_key( $_GET['type'] ); // Post type archive ?>
 
 					<?php
 					$post_object = get_post_type_object( $post_type );