Skip to content

Commit 5de34a5

Browse files
fix: escape URLs to prevent XSS
1 parent e7cea77 commit 5de34a5

1 file changed

Lines changed: 4 additions & 1 deletion

File tree

inc/url_replacer.php

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -163,7 +163,10 @@ public function build_url(
163163
$url = sprintf( '%s://%s', is_ssl() ? 'https' : 'http', $url );
164164
}
165165
$normalized_ext = strtolower( $ext );
166-
$url = esc_url( $url );
166+
$url = esc_url( $url );
167+
if ( empty( $url ) ) {
168+
return $original_url;
169+
}
167170
if ( isset( Optml_Config::$image_extensions[ $normalized_ext ] ) ) {
168171
$new_url = $this->normalize_image( $url, $original_url, $args, $is_uploaded, $normalized_ext );
169172
if ( $is_uploaded ) {

0 commit comments

Comments
 (0)