Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix/escape add query arg template url (https://github.com/woocommerce/woocommerce-blocks/pull/9715) 

* Escape postId for template part within MiniCart

* Escape  url

* Change esc_url to esc_url_raw
This commit is contained in:
Tom Cafferkey 2023-06-06 16:42:19 +01:00 committed by GitHub
parent dc6fa4a8c9
commit 24a293bde7
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
plugins/woocommerce-blocks/src/BlockTypes/MiniCart.php
View File

@ -181,12 +181,14 @@ class MiniCart extends AbstractBlock {
);
}
$template_part_edit_uri = add_query_arg(
array(
'postId' => sprintf( '%s//%s', $theme_slug, 'mini-cart' ),
'postType' => 'wp_template_part',
),
$site_editor_uri
$template_part_edit_uri = esc_url_raw(
add_query_arg(
array(
'postId' => sprintf( '%s//%s', $theme_slug, 'mini-cart' ),
'postType' => 'wp_template_part',
),
$site_editor_uri
)
);
}