Title: Sanitize user input
Last modified: August 24, 2016

---

# Sanitize user input

 *  Resolved [henrisalo](https://wordpress.org/support/users/henrisalo/)
 * (@henrisalo)
 * [11 years, 1 month ago](https://wordpress.org/support/topic/sanitize-user-input/)
 * Please sanitize user input in onwp-options to onwp_settings[client_id] and onwp_settings[
   client_secret]. There is a risk of cross-site scripting security vulnerability.
   I was not able to bypass anti-CSRF protection and lower level users did not have
   permission to change these settings so at the moment there is no security issue,
   but this could change in future versions of this plugin.
 * [https://wordpress.org/plugins/onenote-publisher/](https://wordpress.org/plugins/onenote-publisher/)

Viewing 1 replies (of 1 total)

 *  Plugin Author [onenotedev](https://wordpress.org/support/users/onenotedev/)
 * (@onenotedev)
 * [11 years, 1 month ago](https://wordpress.org/support/topic/sanitize-user-input/#post-6160245)
 * Thanks for the heads up! we will fix this ASAP.

Viewing 1 replies (of 1 total)

The topic ‘Sanitize user input’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/onenote-publisher_b287af.svg)
 * [﻿=== Plugin Name](https://wordpress.org/plugins/onenote-publisher/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/onenote-publisher/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/onenote-publisher/)
 * [Active Topics](https://wordpress.org/support/plugin/onenote-publisher/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/onenote-publisher/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/onenote-publisher/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [onenotedev](https://wordpress.org/support/users/onenotedev/)
 * Last activity: [11 years, 1 month ago](https://wordpress.org/support/topic/sanitize-user-input/#post-6160245)
 * Status: resolved