From 28a147669395d8abefa143bf6f949a04c6683806 Mon Sep 17 00:00:00 2001
From: Bogdan Preda <bogdan.preda@themeisle.com>
Date: Tue, 4 Jun 2024 10:58:11 +0300
Subject: [PATCH] chore: escape option

---
 load.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/load.php b/load.php
index d0db91ef..2144a8a0 100644
--- a/load.php
+++ b/load.php
@@ -133,11 +133,11 @@ function tsdk_utmify( $url, $area, $location = null ) {
 
 			$theme_option_url = get_option( $theme_upgrade_option_name, false );
 			if ( ! empty( $theme_option_url ) ) {
-				$utmify_url = $theme_option_url;
+				$utmify_url = esc_url( $theme_option_url );
 			}
 			$plugin_option_url = get_option( $plugin_upgrade_option_name, false );
 			if ( ! empty( $plugin_option_url ) ) {
-				$utmify_url = $plugin_option_url;
+				$utmify_url = esc_url( $plugin_option_url );
 			}
 		}