diff --git a/classes/class-live-update.php b/classes/class-live-update.php index c029379e0..c23c62fa7 100644 --- a/classes/class-live-update.php +++ b/classes/class-live-update.php @@ -202,7 +202,7 @@ public function heartbeat_received( $response, $data ) { $query_args = json_decode( $data['wp-stream-heartbeat-query'], true ); $query_args['paged'] = $total_pages; - $response['last_page_link'] = add_query_arg( $query_args, admin_url( 'admin.php' ) ); + $response['last_page_link'] = esc_url( add_query_arg( $query_args, admin_url( 'admin.php' ) ) ); } else { $response['total_pages'] = 0; }