Adding escaping

the and_add_new_redirect() method has no escaping in place opening to some security risks. Adding that into place :) Congrats on your first plugin! :+1: