Changeset 2955748

Timestamp:

08/19/2023 07:26:19 PM (20 months ago)

Author:

yotuwp

Message:

version 1.3.13

Location:

yotuwp-easy-youtube-embed/trunk

Files:

• readme.txt (modified) (2 diffs)
• yotuwp.php (modified) (3 diffs)

yotuwp-easy-youtube-embed/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 4.5
 Tested up to: 6.2
-Stable tag: 1.3.12
+Stable tag: 1.3.13
 Donate link: https://www.paypal.me/tuongpg
 License: GPLv2 or later
@@ -114 +114 @@
 
 == Changelog ==
+= 1.3.13 - Aug 20th, 2023 =
+* Fix security issue
+
+== Changelog ==
 = 1.3.12 - Dec 12th, 2022 =
 * Fix display issue

yotuwp-easy-youtube-embed/trunk/yotuwp.php

@@ -4 +4 @@
 * Plugin URI: https://www.yotuwp.com/
 * Description: Easy embed YouTube playlist, channel, videos and user videos to posts/pages/widgets
-* Version: 1.3.12
+* Version: 1.3.13
 * Text Domain: yotuwp-easy-youtube-embed
 * Domain Path: /languages
@@ -18 +18 @@
 
 if( !defined( 'YOTUWP_VERSION' ) )
-    define( 'YOTUWP_VERSION', '1.3.12' );
+    define( 'YOTUWP_VERSION', '1.3.13' );
 
 global $yotuwp, $yotuwp_inline_script;
@@ -953 +953 @@
 
     public function register_settings() {
-        register_setting( 'yotu', 'yotu-settings' );
-        register_setting( 'yotu', 'yotu-player' );
-        register_setting( 'yotu', 'yotu-styling' );
-        register_setting( 'yotu', 'yotu-api' );
-        register_setting( 'yotu', 'yotu-cache' );
-        register_setting( 'yotu', 'yotu-effects' ); 
+        register_setting( 'yotu', 'yotu-settings', array(
+            'sanitize_callback' => array( $this, 'admin_post_save_data' ),
+        ) );
+        register_setting( 'yotu', 'yotu-player', array(
+            'sanitize_callback' => array( $this, 'admin_post_save_data' ),
+        ));
+        register_setting( 'yotu', 'yotu-styling' , array(
+            'sanitize_callback' => array( $this, 'admin_post_save_data' ),
+        ));
+        register_setting( 'yotu', 'yotu-api' , array(
+            'sanitize_callback' => array( $this, 'admin_post_save_data' ),
+        ));
+        register_setting( 'yotu', 'yotu-cache' , array(
+            'sanitize_callback' => array( $this, 'admin_post_save_data' ),
+        ));
+        register_setting( 'yotu', 'yotu-effects' , array(
+            'sanitize_callback' => array( $this, 'admin_post_save_data' ),
+        )); 
 
         do_action( 'yotu_register_setting' );
+    }
+
+
+    function admin_post_save_data( $inputs = NULL ){
+        foreach( $inputs as $key => $val ) {
+            $inputs[ $key ] = sanitize_text_field( esc_js($val));
+        }
+
+        return $inputs;
     }