From 0791d205f5601085ecd1639edcb66127ac6b2e13 Mon Sep 17 00:00:00 2001
From: Jon Waldstein <jonwaldstein@jwaldstein-MacBook-Pro.local>
Date: Thu, 16 May 2024 09:59:44 -0400
Subject: [PATCH] fix: add esc_attr to session_id redirect

---
 src/PaymentGateways/Gateways/Stripe/Traits/CheckoutRedirect.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PaymentGateways/Gateways/Stripe/Traits/CheckoutRedirect.php b/src/PaymentGateways/Gateways/Stripe/Traits/CheckoutRedirect.php
index aae82256ba..01d4dfcb2b 100644
--- a/src/PaymentGateways/Gateways/Stripe/Traits/CheckoutRedirect.php
+++ b/src/PaymentGateways/Gateways/Stripe/Traits/CheckoutRedirect.php
@@ -83,7 +83,7 @@ public static function maybeHandleRedirect()
                     // Make the id field from the Checkout Session creation API response
                     // available to this file, so you can provide it as parameter here
                     // instead of the {{CHECKOUT_SESSION_ID}} placeholder.
-                    sessionId: '<?php echo $session_id; ?>'
+                    sessionId: '<?php echo esc_attr($session_id); ?>'
                 }).then( ( result ) => {
                     console.log(result);
                     // If `redirectToCheckout` fails due to a browser or network