TheWebSolver / tws-license-manager-client

The Web Solver License Manager Client extends the functionality of License Manager for WooCommerce. This plugin/framework is to be included inside the selling plugin for license activation/deactivation.
https://github.com/TheWebSolver/tws-license-manager-client
GNU General Public License v3.0
6 stars 2 forks source link

Usage of esc_url_raw() Instead of esc_url() #13

Open PluginVulnerabilities opened 10 months ago

PluginVulnerabilities commented 10 months ago

In the file /Includes/API/Manager.php, you are using the function esc_url_raw() for escaping, which "sanitizes a URL for database or redirect usage." Neither of those situations are happening when you are using it. You should use esc_url() instead.