Merge pull request #76 from experius/feature/SONPU-839

[FEATURE][SONPU-839] Add escape url

Author: HappyLeeuw

view/adminhtml/templates/system/config/checker.phtml

@@ -1,16 +1,17 @@
 <?php /* @var $block \Experius\Postcode\Block\System\Config\Checker */ ?>
+<?php /* @var $escaper \Magento\Framework\Escaper */ ?>
     <script>
         require([
             'jquery',
             'prototype',
         ], function (jQuery) {
 
             function apicheck() {
-                var params = {  
+                var params = {
                     apikey :    jQuery("#postcodenl_api_general_api_key").val(),
                     apisecret : jQuery("#postcodenl_api_general_api_secret").val()
                 };
-                new Ajax.Request('<?php echo $block->getAjaxUrl() ?>', {
+                new Ajax.Request('<?php echo $escaper->escapeUrl($block->getAjaxUrl()) ?>', {
                     loaderArea: true,
                     asynchronous: true,
                     parameters: params,