| @@ -429,9 +429,9 @@ | ||
| 429 | 429 | return get_permalink( $this->args['page_id'] ); |
| 430 | 430 | break; |
| 431 | 431 | |
| 432 | 432 | case 'url_referer': |
| 433 | - return isset( $_SERVER['HTTP_REFERER'] ) ? sanitize_url( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : ''; | |
| 433 | + return isset( $_SERVER['HTTP_REFERER'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : ''; | |
| 434 | 434 | break; |
| 435 | 435 | |
| 436 | 436 | case 'url_login': |
| 437 | 437 | return wp_login_url(); |