System Info: Fix - Escape URLs.

ClassicPress-research · Feb 24, 2020 · 3c07709 · 3c07709
1 parent eaa0795
commit 3c07709
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/core/logger/log-reporter.php b/core/logger/log-reporter.php
@@ -30,7 +30,7 @@ public function get_title() {
 				'_wpnonce' => $nonce,
 			] );
 
-			$title .= '<a href="' . $url . '#elementor-clear-log" class="box-title-tool">' . __( 'Clear Log', 'elementor' ) . '</a>';
+			$title .= '<a href="' . esc_url( $url ) . '#elementor-clear-log" class="box-title-tool">' . __( 'Clear Log', 'elementor' ) . '</a>';
 			$title .= '<span id="elementor-clear-log"></span>';
 		}
 

diff --git a/modules/usage/usage-reporter.php b/modules/usage/usage-reporter.php
@@ -27,7 +27,7 @@ public function get_title() {
 				'_wpnonce' => $nonce,
 			] );
 
-			$title .= '<a id="elementor-usage-recalc" href="' . $url . '#elementor-usage-recalc" class="box-title-tool">Recalc</a>';
+			$title .= '<a id="elementor-usage-recalc" href="' . esc_url( $url ) . '#elementor-usage-recalc" class="box-title-tool">Recalc</a>';
 		}
 
 		return $title;