Skip add_query_arg() finding as false positive
[MAILPOET-5230]
This commit is contained in:
@@ -32,7 +32,7 @@ class Export {
|
||||
'height="100%"',
|
||||
'scrolling="no"',
|
||||
'frameborder="0"',
|
||||
'src="' . esc_url($iframeUrl) . '"',
|
||||
'src="' . WPFunctions::get()->escUrl($iframeUrl) . '"',
|
||||
'class="mailpoet_form_iframe"',
|
||||
'id="mailpoet_form_iframe"',
|
||||
'vspace="0"',
|
||||
|
@@ -81,7 +81,7 @@ class Functions {
|
||||
}
|
||||
|
||||
public function addQueryArg($key, $value = false, $url = false) {
|
||||
return add_query_arg($key, $value, $url);
|
||||
return add_query_arg($key, $value, $url); // nosemgrep: tools.wpscan-semgrep-rules.audit.php.wp.security.xss.query-arg
|
||||
}
|
||||
|
||||
public function addScreenOption($option, $args = []) {
|
||||
|
Reference in New Issue
Block a user