Changeset 2850442

Timestamp:

01/18/2023 12:14:22 PM (3 years ago)

Author:

nicdark

Message:

edit files for version 6.7

Location:

nd-shortcodes/trunk

Files:

• nd-shortcodes.php (modified) (1 diff)
• readme.txt (modified) (2 diffs)
• shortcodes/testimonial/index.php (modified) (1 diff)

nd-shortcodes/trunk/nd-shortcodes.php

@@ -3 +3 @@
 Plugin Name:       ND Shortcodes
 Description:       The plugin adds some useful components to your page builder ( Elementor or WP Bakery Page Builder ). All components are full responsive and retina ready.
-Version:           6.6
+Version:           6.7
 Plugin URI:        https://nicdark.com
 Author:            Nicdark

nd-shortcodes/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 4.5
 Tested up to: 6.0
-Stable tag: 6.6
+Stable tag: 6.7
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -27 +27 @@
 
 == Changelog ==
+
+= 6.7 =
+* added data escaping on variables used on testimonial shortcode
 
 = 6.6 =

nd-shortcodes/trunk/shortcodes/testimonial/index.php

@@ -38 +38 @@
   $nd_options_layout_selected = dirname( __FILE__ ).'/layout/'.$nd_options_layout.'.php';
   include realpath($nd_options_layout_selected);
-      
+
+
+  //check datas
+  $nd_options_allowed_html = [
+    'div'      => [  
+      'id' => [],
+      'class' => [],
+      'style' => [],
+    ],
+    'p'      => [
+      'id' => [],
+      'class' => [],
+      'style' => [],
+    ],
+    'h4'      => [
+      'id' => [],
+      'class' => [],
+      'style' => [],
+    ],
+    'img'      => [
+      'id' => [],
+      'class' => [],
+      'style' => [],
+      'src' => [],
+      'width' => [],
+      'height' => [],
+      'alt' => [],
+    ],
+  ];
+
+  $str = wp_kses( $str, $nd_options_allowed_html );
+ 
   
-   return apply_filters('uds_shortcode_out_filter', $str);
+  return apply_filters('uds_shortcode_out_filter', $str);
+
 }
 //END TESTIMONIAL