← All changes | classes/Visualizer/Render/Page/Settings.php +2 -2 3.0.6 → 3.10.8 View file →

		@@ -50,9 +50,9 @@
50	50	*
51	51	* @access protected
52	52	*/
53	53	protected function _renderToolbar() {
54		- echo '<a class="button button-large" href="', add_query_arg( 'tab', 'data' ), '">';
	54	+ echo '<a class="button button-large" href="', esc_url( add_query_arg( 'tab', 'data' ) ), '">';
55	55	esc_html_e( 'Back', 'visualizer' );
56	56	echo '</a>';
57	57	echo '<input type="submit" class="button button-primary button-large push-right" value="', $this->button, '">';
58	58	}
		@@ -64,9 +64,9 @@
64	64	*
65	65	* @access protected
66	66	*/
67	67	protected function _toHTML() {
68		- echo '<form id="settings-form" action="', add_query_arg( 'nonce', wp_create_nonce() ), '" method="post">';
	68	+ echo '<form id="settings-form" action="', esc_url( add_query_arg( 'nonce', wp_create_nonce() ) ), '" method="post">';
69	69	parent::_toHTML();
70	70	echo '</form>';
71	71	}
72	72