diff --git a/php/classes/handlers/class-admin-notifications-handler.php b/php/classes/handlers/class-admin-notifications-handler.php index 157a4f09..239b6b29 100644 --- a/php/classes/handlers/class-admin-notifications-handler.php +++ b/php/classes/handlers/class-admin-notifications-handler.php @@ -448,10 +448,10 @@ public function check_existing_podcasts() { */ public function existing_episodes_notice() { $hosting_tab_url = ssp_get_tab_url( 'castos-hosting' ); - $ignore_message_url = add_query_arg( array( + $ignore_message_url = esc_url( add_query_arg( array( 'podcast_import_action' => 'ignore', 'nonce' => wp_create_nonce( 'podcast_import_action' ), - ) ); + ) ) ); $message = ''; $message .= '
You\'ve connected to your Castos account, and you have existing podcasts that can be synced.
'; $message .= 'You can sync your existing podcasts to Castos now.
'; diff --git a/php/classes/handlers/class-options-handler.php b/php/classes/handlers/class-options-handler.php index 735db17e..989b8eda 100644 --- a/php/classes/handlers/class-options-handler.php +++ b/php/classes/handlers/class-options-handler.php @@ -85,13 +85,13 @@ public function options_fields() { $subscribe_options_array = $this->get_subscribe_field_options(); - $feed_details_url = add_query_arg( + $feed_details_url = esc_url( add_query_arg( array( 'post_type' => SSP_CPT_PODCAST, 'page' => 'podcast_settings', 'tab' => 'feed-details', ) - ); + ) ); $options['subscribe'] = array( 'title' => __( 'Distribution options', 'seriously-simple-podcasting' ), diff --git a/seriously-simple-podcasting.php b/seriously-simple-podcasting.php index f1f1b9c3..5c6adf09 100644 --- a/seriously-simple-podcasting.php +++ b/seriously-simple-podcasting.php @@ -1,7 +1,7 @@ - -