Changeset 3010794

Timestamp:

12/16/2023 10:33:20 AM (2 years ago)

Author:

munirkamal

Message:

Update to version 1.40.4 from GitHub

Location:

block-options

Files:

• tags/1.40.4 (copied) (copied from block-options/trunk)
• tags/1.40.4/includes/addons/styles-manager/gutenberghub-styles-manager-admin.php (modified) (2 diffs)
• tags/1.40.4/includes/addons/styles-manager/rest-api/gutenberghub-styles-import-export-controller.php (modified) (1 diff)
• tags/1.40.4/languages/editorskit.pot (modified) (2 diffs)
• tags/1.40.4/plugin.php (modified) (2 diffs)
• tags/1.40.4/readme.txt (modified) (2 diffs)
• trunk/includes/addons/styles-manager/gutenberghub-styles-manager-admin.php (modified) (2 diffs)
• trunk/includes/addons/styles-manager/rest-api/gutenberghub-styles-import-export-controller.php (modified) (1 diff)
• trunk/languages/editorskit.pot (modified) (2 diffs)
• trunk/plugin.php (modified) (2 diffs)
• trunk/readme.txt (modified) (2 diffs)

block-options/tags/1.40.4/includes/addons/styles-manager/gutenberghub-styles-manager-admin.php

@@ -66 +66 @@
             EDITORSKIT_PLUGIN_URL . 'build/styles-manager-addon-block.js',
             array(
+                'lodash',
                 'wp-element',
                 'wp-api',
@@ -98 +99 @@
                 EDITORSKIT_PLUGIN_URL . 'build/styles-manager-addon-admin.js',
                 array(
+                    'lodash',
                     'wp-element',
                     'wp-api',

block-options/tags/1.40.4/includes/addons/styles-manager/rest-api/gutenberghub-styles-import-export-controller.php

@@ -105 +105 @@
         }
 
+        $file_type = wp_check_filetype( $files['json']['name'] );
+
+        if ( 'json' !== $file_type['ext'] ) {
+            return new WP_REST_Response( array( 'message' => 'Invalid file type. Only JSON files are allowed.' ), 400 );
+        }
+
         require_once ABSPATH . 'wp-admin/includes/file.php';
 

block-options/tags/1.40.4/languages/editorskit.pot

@@ -3 +3 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: EditorsKit 1.40.3\n"
+"Project-Id-Version: EditorsKit 1.40.4\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/block-options\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
@@ -10 +10 @@
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2023-09-30T07:17:53+00:00\n"
+"POT-Creation-Date: 2023-12-16T10:24:22+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.7.1\n"

block-options/tags/1.40.4/plugin.php

@@ -4 +4 @@
  * Plugin URI: https://editorskit.com/
  * Description: EditorsKit is a suite of <strong>page building block options</strong> for the Gutenberg block editor.
- * Version: 1.40.3
+ * Version: 1.40.4
  * Author: Munir Kamal
  * Author URI: https://www.munirkamal.com/
@@ -96 +96 @@
         private function setup_constants() {
             $this->define( 'EDITORSKIT_DEBUG', true );
-            $this->define( 'EDITORSKIT_VERSION', '1.40.3' );
+            $this->define( 'EDITORSKIT_VERSION', '1.40.4' );
             $this->define( 'EDITORSKIT_HAS_PRO', false );
             $this->define( 'EDITORSKIT_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

block-options/tags/1.40.4/readme.txt

@@ -7 +7 @@
 Tested up to: 6.3
 Requires PHP: 5.6
-Stable tag: 1.40.3
+Stable tag: 1.40.4
 License: GPL-3.0
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
@@ -198 +198 @@
 == Changelog ==
 
+= 1.40.4
+* Fix: Added a check for file type in styles importer to improve security.
+
 = 1.40.3
 * Fix: Styles manager conflicting with other post types.

block-options/trunk/includes/addons/styles-manager/gutenberghub-styles-manager-admin.php

@@ -66 +66 @@
             EDITORSKIT_PLUGIN_URL . 'build/styles-manager-addon-block.js',
             array(
+                'lodash',
                 'wp-element',
                 'wp-api',
@@ -98 +99 @@
                 EDITORSKIT_PLUGIN_URL . 'build/styles-manager-addon-admin.js',
                 array(
+                    'lodash',
                     'wp-element',
                     'wp-api',

block-options/trunk/includes/addons/styles-manager/rest-api/gutenberghub-styles-import-export-controller.php

@@ -105 +105 @@
         }
 
+        $file_type = wp_check_filetype( $files['json']['name'] );
+
+        if ( 'json' !== $file_type['ext'] ) {
+            return new WP_REST_Response( array( 'message' => 'Invalid file type. Only JSON files are allowed.' ), 400 );
+        }
+
         require_once ABSPATH . 'wp-admin/includes/file.php';
 

block-options/trunk/languages/editorskit.pot

@@ -3 +3 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: EditorsKit 1.40.3\n"
+"Project-Id-Version: EditorsKit 1.40.4\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/block-options\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
@@ -10 +10 @@
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2023-09-30T07:17:53+00:00\n"
+"POT-Creation-Date: 2023-12-16T10:24:22+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.7.1\n"

block-options/trunk/plugin.php

@@ -4 +4 @@
  * Plugin URI: https://editorskit.com/
  * Description: EditorsKit is a suite of <strong>page building block options</strong> for the Gutenberg block editor.
- * Version: 1.40.3
+ * Version: 1.40.4
  * Author: Munir Kamal
  * Author URI: https://www.munirkamal.com/
@@ -96 +96 @@
         private function setup_constants() {
             $this->define( 'EDITORSKIT_DEBUG', true );
-            $this->define( 'EDITORSKIT_VERSION', '1.40.3' );
+            $this->define( 'EDITORSKIT_VERSION', '1.40.4' );
             $this->define( 'EDITORSKIT_HAS_PRO', false );
             $this->define( 'EDITORSKIT_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

block-options/trunk/readme.txt

@@ -7 +7 @@
 Tested up to: 6.3
 Requires PHP: 5.6
-Stable tag: 1.40.3
+Stable tag: 1.40.4
 License: GPL-3.0
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
@@ -198 +198 @@
 == Changelog ==
 
+= 1.40.4
+* Fix: Added a check for file type in styles importer to improve security.
+
 = 1.40.3
 * Fix: Styles manager conflicting with other post types.