Code checked with PHPCS and PHPCB.

Nuvei · Jul 9, 2024 · 89c54c5 · 89c54c5
1 parent d2a9bce
commit 89c54c5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 7 deletions.
diff --git a/view/adminhtml/templates/readPlans.phtml b/view/adminhtml/templates/readPlans.phtml
@@ -1,5 +1,5 @@
 <script>
-    var nuveiData               = <?php echo /* @noEscape */ $block->getPaymentPlans(); ?>;
+    var nuveiData               = <?php echo $block->escapeHtml($block->getPaymentPlans()); ?>;
     var nuveiPaymentPlans       = nuveiData.plans;
     var nuveiDropdownPlanVal    = 1;
 

diff --git a/view/adminhtml/templates/system/config/getPlans.phtml b/view/adminhtml/templates/system/config/getPlans.phtml
@@ -11,7 +11,7 @@
                 url: '<?php echo $block->escapeUrl($block->getAjaxUrl()); ?>',
                 showLoader: true,
                 data: {
-                    form_key:'<?php echo /* @noEscape */ $block->getFormKey(); ?>'
+                    form_key:'<?php echo $block->escapeHtml($block->getFormKey()); ?>'
                 },
                 type: "POST",
 

diff --git a/view/frontend/templates/product_plan_details.phtml b/view/frontend/templates/product_plan_details.phtml
@@ -45,7 +45,7 @@
                     type: 'get',
                     url: '<?php echo $block->escapeUrl($nuvei_texts['nuvei_ajax_url']); ?>',
                     data: {
-                        prodId: '<?php echo /* @noEscape */ $nuvei_texts['nuvei_prod_id']; ?>',
+                        prodId: '<?php echo $block->escapeUrl($nuvei_texts['nuvei_prod_id']); ?>',
                         params: strParams
                     },
                     cache: false,
@@ -99,12 +99,11 @@
                     var _self           = $(this);
                     var attrId          = _self.attr('id').replace('attribute', '');
                     var nuveiAttrVal    = _self.val();
+                    var nuveiAttrId     = '<?php echo $block->escapeHtml($nuvei_texts['nuvei_attr_id']); ?>';
 
-                    console.log('nuvei change option', [attrId, nuveiAttrVal, '<?php echo $nuvei_texts['nuvei_attr_id']; ?>']);
+                    console.log('nuvei change option', [attrId, nuveiAttrVal, nuveiAttrId]);
 
-                    if('<?php echo $block->escapeHtml($nuvei_texts['nuvei_attr_id']); ?>' == attrId
-                        && '' != nuveiAttrVal
-                    ) {
+                    if(nuveiAttrId == attrId && '' != nuveiAttrVal) {
                         nuveiShowPlanDetails(attrId + '=' + nuveiAttrVal);
                     }
                     else {