escaping the url

girishpanchal30 · girishpanchal30 · commit 1601157ac335 · 2025-10-14T19:34:07.000+05:30
diff --git a/includes/abstract/feedzy-rss-feeds-admin-abstract.php b/includes/abstract/feedzy-rss-feeds-admin-abstract.php
@@ -698,11 +698,11 @@ public function normalize_urls( $raw ) {
 		if ( is_array( $feed_url ) ) {
 			foreach ( $feed_url as $index => $url ) {
 				if ( wp_http_validate_url( $url ) ) {
-					$feed_url[ $index ] = trim( $this->smart_convert( $url ) );
+					$feed_url[ $index ] = trim( $this->smart_convert( esc_url_raw( $url ) ) );
 				}
 			}
 		} elseif ( wp_http_validate_url( $feed_url ) ) {
-			$feed_url = trim( $this->smart_convert( $feed_url ) );
+			$feed_url = trim( $this->smart_convert( esc_url_raw( $feed_url ) ) );
 		} else {
 			$feed_url = '';
 		}

Original file line number	Diff line number	Diff line change
`@@ -698,11 +698,11 @@ public function normalize_urls( $raw ) {`
`698`	`698`	`if ( is_array( $feed_url ) ) {`
`699`	`699`	`foreach ( $feed_url as $index => $url ) {`
`700`	`700`	`if ( wp_http_validate_url( $url ) ) {`
`701`		`- $feed_url[ $index ] = trim( $this->smart_convert( $url ) );`
	`701`	`+ $feed_url[ $index ] = trim( $this->smart_convert( esc_url_raw( $url ) ) );`
`702`	`702`	`}`
`703`	`703`	`}`
`704`	`704`	`} elseif ( wp_http_validate_url( $feed_url ) ) {`
`705`		`- $feed_url = trim( $this->smart_convert( $feed_url ) );`
	`705`	`+ $feed_url = trim( $this->smart_convert( esc_url_raw( $feed_url ) ) );`
`706`	`706`	`} else {`
`707`	`707`	`$feed_url = '';`
`708`	`708`	`}`