Changeset 2645069

Timestamp:

12/16/2021 09:53:54 AM (4 years ago)

Author:

crisp.im

Message:

Fix esc_url

File:

• crisp/trunk/crisp.php (modified) (3 diffs)

crisp/trunk/crisp.php

@@ -75 +75 @@
   $http_callback = "http" . (($_SERVER["SERVER_PORT"] == 443) ? "s://" : "://") . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
   $http_callback = urlencode(wp_nonce_url($http_callback));
-  $add_to_crisp_link = esc_url("https://app.crisp.chat/initiate/plugin/aca0046c-356c-428f-8eeb-063014c6a278?payload=$http_callback");
+  $add_to_crisp_link = esc_url_raw("https://app.crisp.chat/initiate/plugin/aca0046c-356c-428f-8eeb-063014c6a278?payload=$http_callback");
 ?>
 
@@ -91 +91 @@
       <a class="crisp-button crisp" href="<?php echo esc_url("https://app.crisp.chat/website/" . $website_id) ?>/inbox/"><?php _e("Go to my Inbox", "crisp"); ?></a>
 
-      <a class="crisp-button crisp-neutral" href="<?php echo $add_to_crisp_link; ?>"><?php _e("Reconfigure", "crisp"); ?></a>
+      <a class="crisp-button crisp-neutral" href="<?php echo esc_url($add_to_crisp_link); ?>"><?php _e("Reconfigure", "crisp"); ?></a>
 
       
@@ -106 +106 @@
       <h2 class="crisp-title"><?php _e("Connect with Crisp.", "crisp"); ?></h2>
       <p class="crisp-subtitle"><?php _e("This link will redirect you to Crisp and configure your Wordpress. Magic", "crisp"); ?></p>
-      <a class="crisp-button crisp" href="<?php echo $add_to_crisp_link; ?>"><?php _e("Connect with Crisp", "crisp"); ?></a>
+      <a class="crisp-button crisp" href="<?php echo esc_url($add_to_crisp_link); ?>"><?php _e("Connect with Crisp", "crisp"); ?></a>
     </div>
   </div>