From 2b4f3ac07d66ed9e42df9b986c1156a71b1fbc3d Mon Sep 17 00:00:00 2001
From: padams <peter@peteradams.org>
Date: Fri, 17 Sep 2021 22:49:33 +0000
Subject: [PATCH] escaping url for tag.

---
 owa-plugin.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/owa-plugin.php b/owa-plugin.php
index 3dc2cd9..579e0fb 100644
--- a/owa-plugin.php
+++ b/owa-plugin.php
@@ -558,7 +558,8 @@ function getTrackerSnippetTemplate() {
 		$tag .= '<script type="text/javascript">' . "\n";
 		$tag .= "var owa_cmds = owa_cmds || []; \n";
 		
-		$base_url = $this->getOption('owaEndpoint');
+		$base_url = esc_url( $this->getOption('owaEndpoint') );
+		
 		$tag .= "var owa_baseUrl = '$base_url'; \n";
 		
 		$tag .= "%s";