Release/3.6.0

php/classes/handlers/class-admin-notifications-handler.php

@@ -448,10 +448,10 @@ public function check_existing_podcasts() {
 	 */
 	public function existing_episodes_notice() {
 		$hosting_tab_url = ssp_get_tab_url( 'castos-hosting' );
-		$ignore_message_url = add_query_arg( array(
+		$ignore_message_url = esc_url( add_query_arg( array(
 			'podcast_import_action' => 'ignore',
 			'nonce' => wp_create_nonce( 'podcast_import_action' ),
-		) );
+		) ) );
 		$message = '';
 		$message .= '<p>You\'ve connected to your Castos account, and you have existing podcasts that can be synced.</p>';
 		$message .= '<p>You can <a href="' . $hosting_tab_url . '">sync your existing podcasts to Castos now.</a></p>';

php/classes/handlers/class-options-handler.php

@@ -85,13 +85,13 @@ public function options_fields() {
 
 		$subscribe_options_array = $this->get_subscribe_field_options();
 
-		$feed_details_url = add_query_arg(
+		$feed_details_url = esc_url( add_query_arg(
 			array(
 				'post_type' => SSP_CPT_PODCAST,
 				'page'      => 'podcast_settings',
 				'tab'       => 'feed-details',
 			)
-		);
+		) );
 
 		$options['subscribe'] = array(
 			'title'       => __( 'Distribution options', 'seriously-simple-podcasting' ),

seriously-simple-podcasting.php

@@ -1,7 +1,7 @@
 <?php
 /**
  * Plugin Name: Seriously Simple Podcasting
- * Version: 3.6.0-alpha.2
+ * Version: 3.6.0-alpha.3
  * Plugin URI: https://castos.com/seriously-simple-podcasting/?utm_medium=sspodcasting&utm_source=wordpress&utm_campaign=wpplugin_08_2019
  * Description: Podcasting the way it's meant to be. No mess, no fuss - just you and your content taking over the world.
  * Author: Castos
@@ -22,7 +22,7 @@
 	exit;
 }
 
-define( 'SSP_VERSION', '3.6.0-alpha.2' );
+define( 'SSP_VERSION', '3.6.0-alpha.3' );
 define( 'SSP_PLUGIN_FILE', __FILE__ );
 define( 'SSP_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
 define( 'SSP_PLUGIN_PATH', plugin_dir_path( __FILE__ ) );