escaping url for tag.

Open-Web-Analytics · Sep 17, 2021 · 2b4f3ac · 2b4f3ac
1 parent a9b98d4
commit 2b4f3ac
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/owa-plugin.php b/owa-plugin.php
@@ -558,7 +558,8 @@ function getTrackerSnippetTemplate() {
 		$tag .= '<script type="text/javascript">' . "\n";
 		$tag .= "var owa_cmds = owa_cmds || []; \n";
 
-		$base_url = $this->getOption('owaEndpoint');
+		$base_url = esc_url( $this->getOption('owaEndpoint') );
+
 		$tag .= "var owa_baseUrl = '$base_url'; \n";
 
 		$tag .= "%s";