Fix - Escaping issue in redirect url (#613)

wpeverest · Oct 2, 2023 · 92ffda7 · 92ffda7
1 parent 0f3a77d
commit 92ffda7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/form-registration.php b/templates/form-registration.php
@@ -199,7 +199,7 @@
 				<input type="hidden" id="ur-form-field-icon" name="ur-field-icon" value="<?php echo esc_attr( $enable_field_icon ); ?>"/>
 				<?php } ?>
 				<input type="hidden" name="ur-user-form-id" value="<?php echo absint( $form_id ); ?>"/>
-				<input type="hidden" name="ur-redirect-url" value="<?php echo esc_attr( ur_string_translation( $form_id, 'user_registration_form_setting_redirect_options', $redirect_url ) ); ?>"/>
+				<input type="hidden" name="ur-redirect-url" value="<?php echo esc_url( ur_string_translation( $form_id, 'user_registration_form_setting_redirect_options', $redirect_url ) ); ?>"/>
 				<?php wp_nonce_field( 'ur_frontend_form_id-' . $form_id, 'ur_frontend_form_nonce', false ); ?>
 
 				<?php do_action( 'user_registration_form_registration_end', $form_id ); ?>