From 56b0b7e34cbf80e6e9fc1a9a52267dda27e6a9f8 Mon Sep 17 00:00:00 2001
From: Amir Reza Mehbakhsh <theamirrezam75@gmail.com>
Date: Thu, 15 Dec 2022 09:54:38 +0330
Subject: [PATCH] Escape variables

---
 Planist.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Planist.php b/Planist.php
index a512a40..2e418a5 100644
--- a/Planist.php
+++ b/Planist.php
@@ -4,7 +4,7 @@
  * Plugin Name:     Planist
  * Plugin URI: 		https://planist.live
  * Description:     Planist Shortcode and Block
- * Version:         1.0
+ * Version:         1.0.0
  * Author:          Parsa Kafi
  * Author URI: 		https://parsa.ws
  */
@@ -64,7 +64,7 @@ class Planist
         $style = apply_filters('planist_iframe_style', $style, $url);
 
 
-        return '<iframe src="' . $url . '" title="' . ucwords($username) . ' Booking Page" width="100%" height="100%" style="' . $style . '"></iframe>';
+        return '<iframe src="' . esc_url($url) . '" title="' . esc_attr(ucwords($username)) . ' Booking Page" width="100%" height="100%" style="' . $style . '"></iframe>';
     }
 }