Add missing escapes

This commit is contained in:
roykho 2020-10-15 16:25:49 -07:00
parent ace411aacd
commit 800cbdbc7e
No known key found for this signature in database
GPG Key ID: 9B06F996CD4ECB92
1 changed files with 2 additions and 2 deletions

View File

@ -344,8 +344,8 @@ class WC_Meta_Box_Order_Data {
if ( 'billing_phone' === $field_name ) {
$field_value = wc_make_phone_clickable( $field_value );
} else if ( 'billing_email' === $field_name ) {
$field_value = '<a href="mailto:' . $field_value . '">' . $field_value . '</a>';
} elseif ( 'billing_email' === $field_name ) {
$field_value = '<a href="mailto:' . esc_attr( $field_value ) . '">' . esc_html( $field_value ) . '</a>';
} else {
$field_value = make_clickable( esc_html( $field_value ) );
}