From 29d9a7da8c3cf827815fadb69db1a890d81aeaca Mon Sep 17 00:00:00 2001
From: George Stephanis <george@stephanis.info>
Date: Wed, 5 Aug 2015 12:52:11 -0400
Subject: [PATCH] Found two missing `esc_js()` calls as well.

---
 includes/admin/settings/views/html-settings-tax.php | 13 ++++++++++++-
 includes/admin/views/html-notice-update.php         |  2 +-
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/includes/admin/settings/views/html-settings-tax.php b/includes/admin/settings/views/html-settings-tax.php
index fca772dc105..c5ad363f2d7 100644
--- a/includes/admin/settings/views/html-settings-tax.php
+++ b/includes/admin/settings/views/html-settings-tax.php
@@ -145,7 +145,18 @@ if ( ! defined( 'ABSPATH' ) ) {
 
 		jQuery('.wc_tax_rates .export').click(function() {
 
-			var csv_data = "data:application/csv;charset=utf-8,<?php _e( 'Country Code', 'woocommerce' ); ?>,<?php _e( 'State Code', 'woocommerce' ); ?>,<?php _e( 'ZIP/Postcode', 'woocommerce' ); ?>,<?php _e( 'City', 'woocommerce' ); ?>,<?php _e( 'Rate %', 'woocommerce' ); ?>,<?php _e( 'Tax Name', 'woocommerce' ); ?>,<?php _e( 'Priority', 'woocommerce' ); ?>,<?php _e( 'Compound', 'woocommerce' ); ?>,<?php _e( 'Shipping', 'woocommerce' ); ?>,<?php _e( 'Tax Class', 'woocommerce' ); ?>\n";
+			var csv_data = "data:application/csv;charset=utf-8,<?php echo esc_js( implode( ',', array(
+					 __( 'Country Code', 'woocommerce' ),
+					 __( 'State Code', 'woocommerce' ),
+					 __( 'ZIP/Postcode', 'woocommerce' ),
+					 __( 'City', 'woocommerce' ),
+					 __( 'Rate %', 'woocommerce' ),
+					 __( 'Tax Name', 'woocommerce' ),
+					 __( 'Priority', 'woocommerce' ),
+					 __( 'Compound', 'woocommerce' ),
+					 __( 'Shipping', 'woocommerce' ),
+					 __( 'Tax Class', 'woocommerce' ),
+				) ) ); ?>\n";
 
 			jQuery('#rates tr:visible').each(function() {
 				var row = '';
diff --git a/includes/admin/views/html-notice-update.php b/includes/admin/views/html-notice-update.php
index 018493e1764..2486880dc86 100644
--- a/includes/admin/views/html-notice-update.php
+++ b/includes/admin/views/html-notice-update.php
@@ -14,7 +14,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 </div>
 <script type="text/javascript">
 	jQuery( '.wc-update-now' ).click( 'click', function() {
-		var answer = confirm( '<?php _e( 'It is strongly recommended that you backup your database before proceeding. Are you sure you wish to run the updater now?', 'woocommerce' ); ?>' );
+		var answer = confirm( '<?php echo esc_js( __( 'It is strongly recommended that you backup your database before proceeding. Are you sure you wish to run the updater now?', 'woocommerce' ) ); ?>' );
 		return answer;
 	});
 </script>