| @@ -296,32 +296,38 @@ | ||
| 296 | 296 | $title = '#' . $chart_id; |
| 297 | 297 | } |
| 298 | 298 | |
| 299 | 299 | $ajax_url = admin_url( 'admin-ajax.php' ); |
| 300 | - $delete_url = add_query_arg( | |
| 301 | - array( | |
| 302 | - 'action' => Visualizer_Plugin::ACTION_DELETE_CHART, | |
| 303 | - 'nonce' => wp_create_nonce(), | |
| 304 | - 'chart' => $chart_id, | |
| 305 | - ), | |
| 306 | - $ajax_url | |
| 300 | + $delete_url = esc_url( | |
| 301 | + add_query_arg( | |
| 302 | + array( | |
| 303 | + 'action' => Visualizer_Plugin::ACTION_DELETE_CHART, | |
| 304 | + 'nonce' => wp_create_nonce(), | |
| 305 | + 'chart' => $chart_id, | |
| 306 | + ), | |
| 307 | + $ajax_url | |
| 308 | + ) | |
| 307 | 309 | ); |
| 308 | - $clone_url = add_query_arg( | |
| 309 | - array( | |
| 310 | - 'action' => Visualizer_Plugin::ACTION_CLONE_CHART, | |
| 311 | - 'nonce' => wp_create_nonce( Visualizer_Plugin::ACTION_CLONE_CHART ), | |
| 312 | - 'chart' => $chart_id, | |
| 313 | - 'type' => $this->type, | |
| 314 | - ), | |
| 315 | - $ajax_url | |
| 310 | + $clone_url = esc_url( | |
| 311 | + add_query_arg( | |
| 312 | + array( | |
| 313 | + 'action' => Visualizer_Plugin::ACTION_CLONE_CHART, | |
| 314 | + 'nonce' => wp_create_nonce( Visualizer_Plugin::ACTION_CLONE_CHART ), | |
| 315 | + 'chart' => $chart_id, | |
| 316 | + 'type' => $this->type, | |
| 317 | + ), | |
| 318 | + $ajax_url | |
| 319 | + ) | |
| 316 | 320 | ); |
| 317 | - $export_link = add_query_arg( | |
| 318 | - array( | |
| 319 | - 'action' => Visualizer_Plugin::ACTION_EXPORT_DATA, | |
| 320 | - 'chart' => $chart_id, | |
| 321 | - 'security' => wp_create_nonce( Visualizer_Plugin::ACTION_EXPORT_DATA . Visualizer_Plugin::VERSION ), | |
| 322 | - ), | |
| 323 | - admin_url( 'admin-ajax.php' ) | |
| 321 | + $export_link = esc_url( | |
| 322 | + add_query_arg( | |
| 323 | + array( | |
| 324 | + 'action' => Visualizer_Plugin::ACTION_EXPORT_DATA, | |
| 325 | + 'chart' => $chart_id, | |
| 326 | + 'security' => wp_create_nonce( Visualizer_Plugin::ACTION_EXPORT_DATA . Visualizer_Plugin::VERSION ), | |
| 327 | + ), | |
| 328 | + admin_url( 'admin-ajax.php' ) | |
| 329 | + ) | |
| 324 | 330 | ); |
| 325 | 331 | |
| 326 | 332 | $chart_status = array( 'date' => get_the_modified_date( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), $chart_id ), 'error' => get_post_meta( $chart_id, Visualizer_Plugin::CF_ERROR, true ), 'icon' => 'dashicons-yes-alt', 'title' => 'A-OK!' ); |
| 327 | 333 | if ( ! empty( $chart_status['error'] ) ) { |
