Changeset 2998182

Timestamp:

11/19/2023 12:40:08 AM (2 years ago)

Author:

someguy9

Message:

0.8.11

Location:

featured-image-caption

Files:

• tags/0.8.10 (added)
• tags/0.8.10/classes (added)
• tags/0.8.10/classes/Bootstrap.php (added)
• tags/0.8.10/classes/Caption.php (added)
• tags/0.8.10/classes/Hooks.php (added)
• tags/0.8.10/classes/MetaBox.php (added)
• tags/0.8.10/classes/Option.php (added)
• tags/0.8.10/classes/RestApi.php (added)
• tags/0.8.10/classes/Shortcode.php (added)
• tags/0.8.10/classes/Upgrade.php (added)
• tags/0.8.10/featured-image-caption.php (added)
• tags/0.8.10/readme.txt (added)
• trunk/classes/MetaBox.php (modified) (1 diff)
• trunk/featured-image-caption.php (modified) (2 diffs)
• trunk/readme.txt (modified) (2 diffs)

featured-image-caption/trunk/classes/MetaBox.php

@@ -88 +88 @@
         // Now that we've validated nonce and permissions, let's save the caption data
         // Sanitize the caption
+        $allowed_html = array(
+            'img' => array(
+                'title' => array(),
+                'src'   => array(),
+                'alt'   => array(),
+            ),
+            'a' => array(
+                'href'  => array(),
+                'title' => array()
+            ),
+            'br' => array(),
+            'em' => array(),
+            'strong' => array(),
+            'p' => array(),
+        );
         $caption = array(
-            'caption_text'    => $_POST[CCFIC_KEY.'_caption_text'],
-            'source_text'    => $_POST[CCFIC_KEY.'_source_text'],
-            'source_url'    => esc_url($_POST[CCFIC_KEY.'_source_url']),
+            'caption_text'    => wp_kses($_POST[CCFIC_KEY.'_caption_text'], $allowed_html),
+            'source_text'    => wp_kses($_POST[CCFIC_KEY.'_source_text'], $allowed_html),
+            'source_url'    => esc_url_raw($_POST[CCFIC_KEY.'_source_url']),
             'new_window'    => (! empty($_POST[CCFIC_KEY.'_new_window']) ? true : false),
         );

featured-image-caption/trunk/featured-image-caption.php

@@ -4 +4 @@
 Plugin URI: https://christiaanconover.com/
 Description: Set a caption for the featured image of a post that can be displayed on your site.
-Version: 0.8.10
+Version: 0.8.11
 Author: Christiaan Conover
 Author URI: https://christiaanconover.com?utm_source=wp-featured-image-caption-author
@@ -19 +19 @@
 define('CCFIC_ID', 'ccfic'); // Plugin ID
 define('CCFIC_NAME', 'Featured Image Caption'); // Plugin name
-define('CCFIC_VERSION', '0.8.10'); // Plugin version
+define('CCFIC_VERSION', '0.8.11'); // Plugin version
 define('CCFIC_WPVER', '3.5'); // Minimum required version of WordPress
 define('CCFIC_PHPVER', '5.6.20'); // Minimum required version of PHP

featured-image-caption/trunk/readme.txt

@@ -5 +5 @@
 Requires at least: 3.5
 Tested up to: 5.7
-Stable tag: 0.8.10
+Stable tag: 0.8.11
 License: GPLv2
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -105 +105 @@
 
 == Changelog ==
+
+= 0.8.11 =
+* Security patch fix.
+* Tested up to WordPress 6.4.
 
 = 0.8.10 =