From 404a61a5667157cec9d325747593647aecdc1f45 Mon Sep 17 00:00:00 2001
From: Derrick Tennant <emrikol@users.noreply.github.com>
Date: Wed, 19 Jun 2019 14:36:32 -0400
Subject: [PATCH] Updating URL escaping function.

`esc_url()` should be used for `src` attributes instead of `esc_attr()`
---
 includes/Core/Modules/Modules.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/Core/Modules/Modules.php b/includes/Core/Modules/Modules.php
index 27d559b007c..206478a2f2d 100644
--- a/includes/Core/Modules/Modules.php
+++ b/includes/Core/Modules/Modules.php
@@ -167,7 +167,7 @@ function() {
 
 					$src = add_query_arg( 'tagverify', '1', home_url() );
 
-					echo '<iframe style="display:none;" data-modules="' . esc_attr( join( '_', $modules ) ) . '" id="sitekit_fe_load_check" src="' . esc_attr( $src ) . '" sandbox="allow-same-origin"></iframe>';
+					echo '<iframe style="display:none;" data-modules="' . esc_attr( join( '_', $modules ) ) . '" id="sitekit_fe_load_check" src="' . esc_url( $src ) . '" sandbox="allow-same-origin"></iframe>';
 
 					$iframe_loaded = true;
 				}