Merge pull request #1310 from 10up/fix/unslashed-post-data

Slash post data when receive a subscription update

Author: dkotter

includes/classes/API/SubscriptionsController.php

@@ -281,13 +281,15 @@ public function receive_item( $request ) {
 			}
 
 			wp_update_post(
-				[
-					'ID'           => $request['post_id'],
-					'post_title'   => $request['post_data']['title'],
-					'post_content' => $content,
-					'post_excerpt' => $request['post_data']['excerpt'],
-					'post_name'    => $request['post_data']['slug'],
-				]
+				wp_slash(
+					[
+						'ID'           => $request['post_id'],
+						'post_title'   => $request['post_data']['title'],
+						'post_content' => $content,
+						'post_excerpt' => $request['post_data']['excerpt'],
+						'post_name'    => $request['post_data']['slug'],
+					]
+				)
 			);
 
 			/**