Skip to content

Commit e831b0d

Browse files
authored
Refactor Google Adwords Code Template
+ Use correct and non-deprecated escaping functions + Simplify FQNs + Formatted for improved readability
1 parent 5dc13c3 commit e831b0d

File tree

1 file changed

+29
-23
lines changed
  • app/code/Magento/GoogleAdwords/view/frontend/templates

1 file changed

+29
-23
lines changed

app/code/Magento/GoogleAdwords/view/frontend/templates/code.phtml

Lines changed: 29 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -3,41 +3,47 @@
33
* Copyright © Magento, Inc. All rights reserved.
44
* See COPYING.txt for license details.
55
*/
6-
?>
7-
<?php
8-
/**
9-
* @var $block \Magento\GoogleAdwords\Block\Code
10-
* @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer
11-
*/
12-
?>
13-
<!-- Google Code for Sale Conversion Page -->
14-
<?php
15-
/** @var \Magento\GoogleAdwords\Helper\Data $helper */
6+
7+
use Magento\Framework\Escaper;
8+
use Magento\Framework\View\Helper\SecureHtmlRenderer;
9+
use Magento\GoogleAdwords\Block\Code;
10+
use Magento\GoogleAdwords\Helper\Data;
11+
12+
/** @var Escaper $escaper */
13+
/** @var SecureHtmlRenderer $secureRenderer */
14+
/** @var Code $block */
15+
/** @var Data $helper */
1616
$helper = $block->getHelper();
17+
1718
$scriptString = <<<script
1819
/* <![CDATA[ */
19-
var google_conversion_id = {$block->escapeJs($helper->getConversionId())};
20-
var google_conversion_language = "{$block->escapeJs($helper->getConversionLanguage())}";
21-
var google_conversion_format = "{$block->escapeJs($helper->getConversionFormat())}";
22-
var google_conversion_color = "{$block->escapeJs($helper->getConversionColor())}";
23-
var google_conversion_label = "{$block->escapeJs($helper->getConversionLabel())}";
24-
var google_conversion_value = {$block->escapeJs($helper->getConversionValue())};
20+
var google_conversion_id = {$escaper->escapeJs($helper->getConversionId())};
21+
var google_conversion_language = "{$escaper->escapeJs($helper->getConversionLanguage())}";
22+
var google_conversion_format = "{$escaper->escapeJs($helper->getConversionFormat())}";
23+
var google_conversion_color = "{$escaper->escapeJs($helper->getConversionColor())}";
24+
var google_conversion_label = "{$escaper->escapeJs($helper->getConversionLabel())}";
25+
var google_conversion_value = {$escaper->escapeJs($helper->getConversionValue())};
2526
script;
26-
if ($helper->hasSendConversionValueCurrency() && $helper->getConversionValueCurrency()):
27+
28+
if ($helper->hasSendConversionValueCurrency() && $helper->getConversionValueCurrency()) {
2729
$scriptString .= <<<script
28-
var google_conversion_currency = "{$block->escapeJs($helper->getConversionValueCurrency())}";
30+
var google_conversion_currency = "{$escaper->escapeJs($helper->getConversionValueCurrency())}";
2931
script;
30-
endif;
32+
}
33+
3134
$scriptString .= <<<script
3235
/* ]]> */
3336
script;
3437
?>
35-
<?= /* @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false) ?>
36-
<script src="<?= $block->escapeHtmlAttr($helper->getConversionJsSrc()) ?>"></script>
38+
<?= /** @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false); ?>
39+
<script src="<?= $escaper->escapeUrl($helper->getConversionJsSrc()); ?>"></script>
3740
<noscript>
3841
<div style="display:inline;">
39-
<img height="1" width="1" style="border-style:none;" alt=""
40-
src="<?= $block->escapeHtmlAttr($helper->getConversionImgSrc()) ?>"/>
42+
<img height="1"
43+
width="1"
44+
style="border-style:none;"
45+
alt=""
46+
src="<?= $escaper->escapeUrl($helper->getConversionImgSrc()); ?>"/>
4147
</div>
4248
</noscript>
4349
<!-- END Google Code for Sale Conversion Page -->

0 commit comments

Comments
 (0)