Changeset 2853149

Timestamp:

01/23/2023 10:29:53 PM (3 years ago)

Author:

LeoPeo

Message:

release 1.1.5

Location:

easy-panorama/trunk

Files:

• admin/class-easy-panorama-admin.php (modified) (3 diffs)
• block/class-easy-panorama-block.php (modified) (1 diff)
• easy-panorama.php (modified) (1 diff)
• includes/class-easy-panorama.php (modified) (1 diff)
• public/class-easy-panorama-public.php (modified) (3 diffs)
• readme.txt (modified) (2 diffs)

easy-panorama/trunk/admin/class-easy-panorama-admin.php

@@ -251 +251 @@
     ?>
     <label>
-      <input id="easyPanorama_panorama[containerHeight]" type="number" name="easyPanorama_panorama[containerHeight]" value="<?php echo $this->options_panorama['containerHeight']; ?>" />
+      <input id="easyPanorama_panorama[containerHeight]" type="number" name="easyPanorama_panorama[containerHeight]" value="<?php echo esc_attr($this->options_panorama['containerHeight']); ?>" />
       <?php _e('px', $this->plugin_name); ?><br>
       <em><?php _e('Insert the height for all panoramic images container (Default: 400px).', $this->plugin_name); ?></em>
@@ -272 +272 @@
     ?>
     <label>
-      <input id="easyPanorama_panorama[failureMessage]" type="text" name="easyPanorama_panorama[failureMessage]" value="<?php echo $this->options_panorama['failureMessage']; ?>" /><br>
+      <input id="easyPanorama_panorama[failureMessage]" type="text" name="easyPanorama_panorama[failureMessage]" value="<?php echo esc_attr($this->options_panorama['failureMessage']); ?>" /><br>
       <em><?php _e('This message will appear in mobile devices with no gyroscopic data or no physical orientation support. (Default: <code>Scroll left/right to pan through panorama.</code>).', $this->plugin_name); ?></em>
     </label>
@@ -300 +300 @@
     ?>
     <label>
-      <input id="easyPanorama_panorama[minimumOverflow]" type="number" name="easyPanorama_panorama[minimumOverflow]" value="<?php echo $this->options_panorama['minimumOverflow'];?>" />
+      <input id="easyPanorama_panorama[minimumOverflow]" type="number" name="easyPanorama_panorama[minimumOverflow]" value="<?php echo esc_attr($this->options_panorama['minimumOverflow']);?>" />
       <?php _e('px', $this->plugin_name); ?><br>
       <em><?php _e('The excess width the picture must have before Paver kicks in (Default: 0px).', $this->plugin_name); ?></em>

easy-panorama/trunk/block/class-easy-panorama-block.php

@@ -79 +79 @@
       'containerHeight' => absint($this->options_panorama['containerHeight']),
       'startPosition' => absint($this->options_panorama['startPosition'] * 10),
-      'gracefulFailure' => (bool)$this->options_panorama['gracefulFailure'],
+      'gracefulFailure' => (bool)esc_attr($this->options_panorama['gracefulFailure']),
       'failureMessage' => esc_attr($this->options_panorama['failureMessage']),
       'failureMessageInsert' => esc_attr($this->options_panorama['failureMessageInsert']),
       'minimumOverflow' => absint($this->options_panorama['minimumOverflow']),
-      'displayMeta' => (bool)$this->options_panorama['meta'],
+      'displayMeta' => (bool)esc_attr($this->options_panorama['meta']),
     );
     return $defaultSettings;

easy-panorama/trunk/easy-panorama.php

@@ -12 +12 @@
  * Plugin URI: https://github.com/leopuleo
  * Description: Embed interactive wide/panoramic images on your site. Optimised for responsive layouts, it works great with devices equipped with motion sensors.
- * Version:           1.1.4
+ * Version:           1.1.5
  * Author: Leonardo Giacone
  * Author URI: https://github.com/leopuleo

easy-panorama/trunk/includes/class-easy-panorama.php

@@ -99 +99 @@
 
     $this->plugin_name = 'easy-panorama';
-    $this->version = '1.1.4';
+    $this->version = '1.1.5';
     $this->plugin_basename = plugin_basename(plugin_dir_path(__DIR__) . $this->plugin_name . '.php');
 

easy-panorama/trunk/public/class-easy-panorama-public.php

@@ -145 +145 @@
     $localize_var = array(
       'panorama' => array(
-        'gracefulFailure' => (bool)$this->options_panorama['gracefulFailure'],
+        'gracefulFailure' => (bool)esc_attr($this->options_panorama['gracefulFailure']),
         'failureMessage' => esc_attr($this->options_panorama['failureMessage']),
         'failureMessageInsert' => esc_attr($this->options_panorama['failureMessageInsert']),
-        'meta' => (bool)$this->options_panorama['meta'],
+        'meta' => (bool)esc_attr($this->options_panorama['meta']),
         'minimumOverflow' => absint($this->options_panorama['minimumOverflow']),
-        'startPosition' => (float)$this->options_panorama['startPosition'],
+        'startPosition' => (float)number_format($this->options_panorama['startPosition'], 1, '.', ''),
       )
     );
@@ -171 +171 @@
       'alt'                     => '',
       'container_height'        => absint($this->options_panorama['containerHeight']),
-      'graceful_failure'        => (bool)$this->options_panorama['gracefulFailure'],
+      'graceful_failure'        => (bool)esc_attr($this->options_panorama['gracefulFailure']),
       'failure_message'         => esc_attr($this->options_panorama['failureMessage']),
       'failure_message_insert'  => esc_attr($this->options_panorama['failureMessageInsert']),
-      'meta'                    => (bool)$this->options_panorama['meta'],
+      'meta'                    => (bool)esc_attr($this->options_panorama['meta']),
       'minimum_overflow'        => absint($this->options_panorama['minimumOverflow']),
-      'start_position'          => (float)$this->options_panorama['startPosition']
+      'start_position'          => (float)number_format($this->options_panorama['startPosition'], 1, '.', '')
     );
 
@@ -212 +212 @@
     echo '
       <div class="easy-panorama"
-        data-graceful-failure="' . (bool)$graceful_failure . '"
+        data-graceful-failure="' . (bool)esc_url($graceful_failure) . '"
         data-failure-message="' . esc_attr($failure_message) . '"
         data-failure-message-insert="' . esc_attr($failure_message_insert) . '"
-        data-meta="' . (bool)$meta . '"
+        data-meta="' . (bool)esc_url($meta) . '"
         data-minimum-overflow="' . absint($minimum_overflow) . '"
         data-start-position="' . floatval($start_position) . '"

easy-panorama/trunk/readme.txt

@@ -6 +6 @@
 Tested up to: 5.0
 Requires PHP: 5.6
-Stable tag: 1.1.4
+Stable tag: 1.1.5
 License: GPL-2.0+
 License URI: http://www.gnu.org/licenses/gpl-2.0.txt
@@ -117 +117 @@
 == Changelog ==
 
+= 1.1.5 (23/01/2023) =
+* Bug fix: Sanitize and escape admin input fields. Thanks to [riodrwn](https://twitter.com/riodrwn)
+
 = 1.1.4 (15/12/2018) =
 * Bug fix: Added <code><MediaUploadCheck></code> + <code>allowedType</code> control