Update 'hush-payment-gateway.php'

Additional sanitization fix for review and typo fix from previous edit

hush-payment-gateway.php

@@ -178,7 +178,7 @@ function set_hush_payment_details($order, $data) {
     
     // Save payment instruction related meta for verifying orders later
     $order->update_meta_data( '_hush_price', sanitize_text_field($hushPrice));
-    $order->update_meta_data( '_hush_receive_address', sanitize_text_field(hushAddress));
+    $order->update_meta_data( '_hush_receive_address', sanitize_text_field($hushAddress));
     $order->update_meta_data( '_hush_expected', sanitize_text_field($hushAmt));
     $order->save();
 }
@@ -511,8 +511,8 @@ function hush_gateway_init() {
             $htmlOutput .= "An auto-generated HUSH URI may be used instead for easier/quicker payment. In lite or full wallet, go to <strong>File > Pay HUSH URI</strong> and copy paste the URI below. Do not modify this URI. Orders will only be fulfilled if expected amount of HUSH is received.<br/><br/>";
             $htmlOutput .= "<strong>Pay HUSH URI: </strong><input type='text' value='".esc_html($hushURI)."' id='hushURI' style='width:100%' readonly='readonly'/><br/><br/>";
             $htmlOutput .= "<strong>Silent Dragon Android QR Code: </strong><br/><img src='/wp-content/uploads/hush/qr_code-".esc_html($timestamp).".png' /><br/><br/>";
-            echo $htmlOutput;
-            
+            $allowedHTML = array('br'=>array(), 'p'=>array(), 'strong'=>array(), 'input'=>array('value' => array(), 'type' => array(), 'id' => array(), 'style' => array(), 'readonly' => array()), 'img'=>array('src' => array()));
+            echo wp_kses($htmlOutput, $allowedHTML);
         }