Merge pull request #76 from experius/feature/SONPU-839

[FEATURE][SONPU-839] Add escape url
experius · Jul 9, 2024 · 4fc3f30 · 4fc3f30
2 parents b4eea8d + abf8576
commit 4fc3f30
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/view/adminhtml/templates/system/config/checker.phtml b/view/adminhtml/templates/system/config/checker.phtml
@@ -1,16 +1,17 @@
 <?php /* @var $block \Experius\Postcode\Block\System\Config\Checker */ ?>
+<?php /* @var $escaper \Magento\Framework\Escaper */ ?>
     <script>
         require([
             'jquery',
             'prototype',
         ], function (jQuery) {
 
             function apicheck() {
-                var params = {  
+                var params = {
                     apikey :    jQuery("#postcodenl_api_general_api_key").val(),
                     apisecret : jQuery("#postcodenl_api_general_api_secret").val()
                 };
-                new Ajax.Request('<?php echo $block->getAjaxUrl() ?>', {
+                new Ajax.Request('<?php echo $escaper->escapeUrl($block->getAjaxUrl()) ?>', {
                     loaderArea: true,
                     asynchronous: true,
                     parameters: params,