No longer use HTML <br> element in exception message and escape values.

pronamic · Oct 11, 2023 · 2fc139e · 2fc139e
1 parent 33f0b20
commit 2fc139e
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/OrderStandard/Client.php b/src/OrderStandard/Client.php
@@ -313,9 +313,9 @@ public function get_order_status( $order_id ) {
 
 			throw new \Exception(
 				\sprintf(
-					'%s<br>%s',
-					sprintf( 'Could not get order status for order ID %s.', $order_id ),
-					(string) $ogone_error
+					'Could not get order status for order ID %s, error: %s.',
+					\esc_html( $order_id ),
+					\esc_html( (string) $ogone_error )
 				)
 			);
 		}