| @@ -33,11 +33,11 @@ | ||
| 33 | 33 | * |
| 34 | 34 | * @since 1.1.0 |
| 35 | 35 | */ |
| 36 | 36 | public function send_feedback_data() { |
| 37 | - $nonce = filter_input( INPUT_POST, '_wpnonce', FILTER_SANITIZE_STRING ); | |
| 38 | - $reason_key = filter_input( INPUT_POST, 'reason_key', FILTER_SANITIZE_STRING ); | |
| 39 | - $description = filter_input( INPUT_POST, 'description', FILTER_SANITIZE_STRING ); | |
| 37 | + $nonce = sellkit_htmlspecialchars( INPUT_POST, '_wpnonce' ); | |
| 38 | + $reason_key = sellkit_htmlspecialchars( INPUT_POST, 'reason_key' ); | |
| 39 | + $description = sellkit_htmlspecialchars( INPUT_POST, 'description' ); | |
| 40 | 40 | |
| 41 | 41 | if ( empty( wp_verify_nonce( $nonce, 'sellkit_deactivate_feedback_nonce' ) ) ) { |
| 42 | 42 | wp_send_json_error( __( 'Nonce is wrong.', 'sellkit' ) ); |
| 43 | 43 | } |
| @@ -86,9 +86,9 @@ | ||
| 86 | 86 | 'sellkit-admin-feedback', |
| 87 | 87 | sellkit()->plugin_url() . 'assets/dist/js/admin-feedback' . $suffix . '.js', |
| 88 | 88 | [ 'jquery', 'wp-util' ], |
| 89 | 89 | sellkit()->version(), |
| 90 | - true, | |
| 90 | + true | |
| 91 | 91 | ); |
| 92 | 92 | |
| 93 | 93 | wp_enqueue_script( 'sellkit-admin-feedback' ); |
| 94 | 94 | |
| @@ -140,9 +140,9 @@ | ||
| 140 | 140 | |
| 141 | 141 | ?> |
| 142 | 142 | <div id="sellkit-deactivate-feedback-dialog-wrapper"> |
| 143 | 143 | <div id="sellkit-deactivate-feedback-dialog-header"> |
| 144 | - <img src="<?php echo sellkit()->plugin_url() . 'assets/img/icons/sellkit-logo.svg'; ?>"> | |
| 144 | + <img src="<?php echo esc_url( sellkit()->plugin_url() . 'assets/img/icons/sellkit-logo.svg' ); ?>"> | |
| 145 | 145 | <span id="sellkit-deactivate-feedback-dialog-header-title"><?php echo esc_html__( 'Sellkit Feedback', 'sellkit' ); ?></span> |
| 146 | 146 | </div> |
| 147 | 147 | <form id="sellkit-deactivate-feedback-dialog-form" method="post"> |
| 148 | 148 | <?php |
| @@ -167,9 +167,9 @@ | ||
| 167 | 167 | </div> |
| 168 | 168 | <div class="sellkit-deactivate-feedback-footer wp-core-ui"> |
| 169 | 169 | <input type="button" class="button action sellkit-deactivate-feedback-cancel-button" value="<?php echo esc_html__( 'Discard', 'sellkit' ); ?>"> |
| 170 | 170 | <div> |
| 171 | - <img class="sellkit-deactivate-feedback-footer-spinner-icon sellkit-hide" src="<?php echo site_url( '/wp-admin/images/wpspin_light.gif' ); ?>"> | |
| 171 | + <img class="sellkit-deactivate-feedback-footer-spinner-icon sellkit-hide" src="<?php echo esc_url( site_url( '/wp-admin/images/wpspin_light.gif' ) ); ?>"> | |
| 172 | 172 | <input type="submit" name="submit" id="submit" class="button button-primary" value="<?php echo esc_html__( 'Submit & Deactivate', 'sellkit' ); ?>"> |
| 173 | 173 | </div> |
| 174 | 174 | </div> |
| 175 | 175 | </form> |
