|
3 | 3 | * Copyright © Magento, Inc. All rights reserved. |
4 | 4 | * See COPYING.txt for license details. |
5 | 5 | */ |
6 | | -?> |
7 | | -<?php |
8 | | -/** |
9 | | - * @var $block \Magento\GoogleAdwords\Block\Code |
10 | | - * @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer |
11 | | - */ |
12 | | -?> |
13 | | -<!-- Google Code for Sale Conversion Page --> |
14 | | -<?php |
15 | | -/** @var \Magento\GoogleAdwords\Helper\Data $helper */ |
| 6 | + |
| 7 | +use Magento\Framework\Escaper; |
| 8 | +use Magento\Framework\View\Helper\SecureHtmlRenderer; |
| 9 | +use Magento\GoogleAdwords\Block\Code; |
| 10 | +use Magento\GoogleAdwords\Helper\Data; |
| 11 | + |
| 12 | +/** @var Escaper $escaper */ |
| 13 | +/** @var SecureHtmlRenderer $secureRenderer */ |
| 14 | +/** @var Code $block */ |
| 15 | +/** @var Data $helper */ |
16 | 16 | $helper = $block->getHelper(); |
| 17 | + |
17 | 18 | $scriptString = <<<script |
18 | 19 | /* <![CDATA[ */ |
19 | | - var google_conversion_id = {$block->escapeJs($helper->getConversionId())}; |
20 | | - var google_conversion_language = "{$block->escapeJs($helper->getConversionLanguage())}"; |
21 | | - var google_conversion_format = "{$block->escapeJs($helper->getConversionFormat())}"; |
22 | | - var google_conversion_color = "{$block->escapeJs($helper->getConversionColor())}"; |
23 | | - var google_conversion_label = "{$block->escapeJs($helper->getConversionLabel())}"; |
24 | | - var google_conversion_value = {$block->escapeJs($helper->getConversionValue())}; |
| 20 | + var google_conversion_id = {$escaper->escapeJs($helper->getConversionId())}; |
| 21 | + var google_conversion_language = "{$escaper->escapeJs($helper->getConversionLanguage())}"; |
| 22 | + var google_conversion_format = "{$escaper->escapeJs($helper->getConversionFormat())}"; |
| 23 | + var google_conversion_color = "{$escaper->escapeJs($helper->getConversionColor())}"; |
| 24 | + var google_conversion_label = "{$escaper->escapeJs($helper->getConversionLabel())}"; |
| 25 | + var google_conversion_value = {$escaper->escapeJs($helper->getConversionValue())}; |
25 | 26 | script; |
26 | | -if ($helper->hasSendConversionValueCurrency() && $helper->getConversionValueCurrency()): |
| 27 | + |
| 28 | +if ($helper->hasSendConversionValueCurrency() && $helper->getConversionValueCurrency()) { |
27 | 29 | $scriptString .= <<<script |
28 | | - var google_conversion_currency = "{$block->escapeJs($helper->getConversionValueCurrency())}"; |
| 30 | + var google_conversion_currency = "{$escaper->escapeJs($helper->getConversionValueCurrency())}"; |
29 | 31 | script; |
30 | | -endif; |
| 32 | +} |
| 33 | + |
31 | 34 | $scriptString .= <<<script |
32 | 35 | /* ]]> */ |
33 | 36 | script; |
34 | 37 | ?> |
35 | | -<?= /* @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false) ?> |
36 | | -<script src="<?= $block->escapeHtmlAttr($helper->getConversionJsSrc()) ?>"></script> |
| 38 | +<?= /** @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false); ?> |
| 39 | +<script src="<?= $escaper->escapeUrl($helper->getConversionJsSrc()); ?>"></script> |
37 | 40 | <noscript> |
38 | 41 | <div style="display:inline;"> |
39 | | - <img height="1" width="1" style="border-style:none;" alt="" |
40 | | - src="<?= $block->escapeHtmlAttr($helper->getConversionImgSrc()) ?>"/> |
| 42 | + <img height="1" |
| 43 | + width="1" |
| 44 | + style="border-style:none;" |
| 45 | + alt="" |
| 46 | + src="<?= $escaper->escapeUrl($helper->getConversionImgSrc()); ?>"/> |
41 | 47 | </div> |
42 | 48 | </noscript> |
43 | 49 | <!-- END Google Code for Sale Conversion Page --> |
0 commit comments