bug fix

Author: mehdiraized

custom-api-creator.php

@@ -258,7 +258,7 @@ public function save_custom_api_meta( $post_id ) {
 
 		foreach ( $fields as $meta_key => $post_key ) {
 			if ( isset( $_POST[ $post_key ] ) ) {
-				$value = $post_key === 'custom_api_sections' ? $this->sanitize_sections( $_POST[ $post_key ] ) : $this->sanitize_array_or_string( $_POST[ $post_key ] );
+				$value = $post_key === 'custom_api_sections' ? $this->sanitize_sections( sanitize_text_field( wp_unslash( $_POST[ $post_key ] ) ) ) : $this->sanitize_array_or_string( sanitize_text_field( wp_unslash( $_POST[ $post_key ] ) ) );
 				update_post_meta( $post_id, $meta_key, $value );
 			} else {
 				delete_post_meta( $post_id, $meta_key );

readme.txt

@@ -8,7 +8,6 @@ Stable tag: 1.0.1
 Requires PHP: 7.0
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
-
 Custom API Creator is a WordPress plugin that lets developers create flexible, secure REST API endpoints, customize data, and control access with role restrictions.