From f8ad0ca5231a8485cb4aaee111e9c2bb7922ff3b Mon Sep 17 00:00:00 2001
From: iftakharul-islam <iftakharulislam881@gmail.com>
Date: Thu, 24 Oct 2024 12:34:30 +0600
Subject: [PATCH] add escaping

---
 inc/class-wp_recaptcha_recaptcha.php             | 6 +++---
 inc/woocommerce/myaccount/form-lost-password.php | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/inc/class-wp_recaptcha_recaptcha.php b/inc/class-wp_recaptcha_recaptcha.php
index ec34f86..bc16cf0 100755
--- a/inc/class-wp_recaptcha_recaptcha.php
+++ b/inc/class-wp_recaptcha_recaptcha.php
@@ -91,7 +91,7 @@ public function print_head() {
 		if ( $recaptcha_theme == 'custom' ) {
 			?><script type="text/javascript">
 			var RecaptchaOptions = {
-				theme : '<?php echo $recaptcha_theme ?>',
+				theme : '<?php echo esc_js( $recaptcha_theme ) ?>',
 				custom_theme_widget: 'recaptcha_widget'
 			};
 			</script><?php
@@ -101,9 +101,9 @@ public function print_head() {
 <?php
 			$language_code = apply_filters( 'wp_recaptcha_language' , WP_reCaptcha::instance()->get_option( 'recaptcha_language' ) );
 			if ( $language_code ) { ?>
-				lang : '<?php echo $language_code ?>',
+				lang : '<?php echo esc_js($language_code) ?>',
 <?php		} ?>
-				theme : '<?php echo $recaptcha_theme ?>'
+				theme : '<?php echo esc_js($recaptcha_theme) ?>'
 				
 			};
 			</script><?php
diff --git a/inc/woocommerce/myaccount/form-lost-password.php b/inc/woocommerce/myaccount/form-lost-password.php
index a06c17f..825b3f2 100644
--- a/inc/woocommerce/myaccount/form-lost-password.php
+++ b/inc/woocommerce/myaccount/form-lost-password.php
@@ -35,8 +35,8 @@
 			<input type="password" class="input-text" name="password_2" id="password_2" />
 		</p>
 
-		<input type="hidden" name="reset_key" value="<?php echo isset( $args['key'] ) ? $args['key'] : ''; ?>" />
-		<input type="hidden" name="reset_login" value="<?php echo isset( $args['login'] ) ? $args['login'] : ''; ?>" />
+		<input type="hidden" name="reset_key" value="<?php echo isset( $args['key'] ) ? esc_attr( $args['key'] ) : ''; ?>" />
+		<input type="hidden" name="reset_login" value="<?php echo isset( $args['login'] ) ? esc_attr( $args['login'] ) : ''; ?>" />
 
 	<?php endif; ?>