|
3 | 3 | * Copyright © Magento, Inc. All rights reserved.
|
4 | 4 | * See COPYING.txt for license details.
|
5 | 5 | */
|
6 |
| -?> |
7 |
| -<?php |
8 |
| -/** |
9 |
| - * @var $block \Magento\GoogleAdwords\Block\Code |
10 |
| - * @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer |
11 |
| - */ |
12 |
| -?> |
13 |
| -<!-- Google Code for Sale Conversion Page --> |
14 |
| -<?php |
15 |
| -/** @var \Magento\GoogleAdwords\Helper\Data $helper */ |
| 6 | + |
| 7 | +use Magento\Framework\Escaper; |
| 8 | +use Magento\Framework\View\Helper\SecureHtmlRenderer; |
| 9 | +use Magento\GoogleAdwords\Block\Code; |
| 10 | +use Magento\GoogleAdwords\Helper\Data; |
| 11 | + |
| 12 | +/** @var Escaper $escaper */ |
| 13 | +/** @var SecureHtmlRenderer $secureRenderer */ |
| 14 | +/** @var Code $block */ |
| 15 | +/** @var Data $helper */ |
16 | 16 | $helper = $block->getHelper();
|
| 17 | + |
17 | 18 | $scriptString = <<<script
|
18 | 19 | /* <![CDATA[ */
|
19 |
| - var google_conversion_id = {$block->escapeJs($helper->getConversionId())}; |
20 |
| - var google_conversion_language = "{$block->escapeJs($helper->getConversionLanguage())}"; |
21 |
| - var google_conversion_format = "{$block->escapeJs($helper->getConversionFormat())}"; |
22 |
| - var google_conversion_color = "{$block->escapeJs($helper->getConversionColor())}"; |
23 |
| - var google_conversion_label = "{$block->escapeJs($helper->getConversionLabel())}"; |
24 |
| - var google_conversion_value = {$block->escapeJs($helper->getConversionValue())}; |
| 20 | + var google_conversion_id = {$escaper->escapeJs($helper->getConversionId())}; |
| 21 | + var google_conversion_language = "{$escaper->escapeJs($helper->getConversionLanguage())}"; |
| 22 | + var google_conversion_format = "{$escaper->escapeJs($helper->getConversionFormat())}"; |
| 23 | + var google_conversion_color = "{$escaper->escapeJs($helper->getConversionColor())}"; |
| 24 | + var google_conversion_label = "{$escaper->escapeJs($helper->getConversionLabel())}"; |
| 25 | + var google_conversion_value = {$escaper->escapeJs($helper->getConversionValue())}; |
25 | 26 | script;
|
26 |
| -if ($helper->hasSendConversionValueCurrency() && $helper->getConversionValueCurrency()): |
| 27 | + |
| 28 | +if ($helper->hasSendConversionValueCurrency() && $helper->getConversionValueCurrency()) { |
27 | 29 | $scriptString .= <<<script
|
28 |
| - var google_conversion_currency = "{$block->escapeJs($helper->getConversionValueCurrency())}"; |
| 30 | + var google_conversion_currency = "{$escaper->escapeJs($helper->getConversionValueCurrency())}"; |
29 | 31 | script;
|
30 |
| -endif; |
| 32 | +} |
| 33 | + |
31 | 34 | $scriptString .= <<<script
|
32 | 35 | /* ]]> */
|
33 | 36 | script;
|
34 | 37 | ?>
|
35 |
| -<?= /* @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false) ?> |
36 |
| -<script src="<?= $block->escapeHtmlAttr($helper->getConversionJsSrc()) ?>"></script> |
| 38 | +<?= /** @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false); ?> |
| 39 | +<script src="<?= $escaper->escapeUrl($helper->getConversionJsSrc()); ?>"></script> |
37 | 40 | <noscript>
|
38 | 41 | <div style="display:inline;">
|
39 |
| - <img height="1" width="1" style="border-style:none;" alt="" |
40 |
| - src="<?= $block->escapeHtmlAttr($helper->getConversionImgSrc()) ?>"/> |
| 42 | + <img height="1" |
| 43 | + width="1" |
| 44 | + style="border-style:none;" |
| 45 | + alt="" |
| 46 | + src="<?= $escaper->escapeUrl($helper->getConversionImgSrc()); ?>"/> |
41 | 47 | </div>
|
42 | 48 | </noscript>
|
43 | 49 | <!-- END Google Code for Sale Conversion Page -->
|
0 commit comments