Changeset 3014777

Timestamp:

12/27/2023 03:53:11 PM (2 years ago)

Author:

poporon

Message:

2.5.0.1

• Fixed: Fixed to remove the link from the URL as a response to the vulnerability.
• Fixed: Fixed a bug that site icons could not be retrieved.

Location:

pz-linkcard/trunk

Files:

• lib/pz-linkcard-cacheman-list.php (modified) (1 diff)
• lib/pz-linkcard-cacheman.php (modified) (1 diff)
• lib/pz-linkcard-settings.php (modified) (1 diff)
• pz-linkcard.php (modified) (5 diffs)
• readme.txt (modified) (3 diffs)

pz-linkcard/trunk/lib/pz-linkcard-cacheman-list.php

@@ -295 +295 @@
                         $is_samepage    =   $url_info['is_samepage'];   // 同一ページ
 
-                        // 表示用のURLを作成
-                        $html_url           =   null;
+                        // URLの警告マーク
+                        $html_url_error     =   '';
                         if  ($data->alive_result < 100 || $data->alive_result >= 400 ) {
-                            if  ($data->no_failure ) {
-                                $html_url   .=  '<span class="pz-lkc-man-body-url-error-ignore" title="'.__('The latest HTTP code is in error, but ignore it.', $this->text_domain ).'">'.__('&#x26a0;&#xfe0f;', $this->text_domain ).'</span>&nbsp;';
+                            if  ($data->no_failure ) {      // エラー無視が有効か
+                                $temp_icon  =   __('&#x26a0;&#xfe0f;', $this->text_domain );    // ⚠️
+                                $temp_class =   'pz-lkc-man-body-url-error-ignore';             // エラー無視
+                                $temp_title =   __('The latest HTTP code is in error, but ignore it.', $this->text_domain );
                             } else {
-                                $html_url   .=  '<span class="pz-lkc-man-body-url-error" title="'.__('The latest HTTP code is in error. You can change it to ignore the error from the edit screen.', $this->text_domain ).'">'.__('&#x26d4;&#xfe0f;', $this->text_domain ).'</span>&nbsp;';
-                            }
-                        }
+                                $temp_icon  =   __('&#x26d4;&#xfe0f;', $this->text_domain );    // ⛔️エラー
+                                $temp_class =   'pz-lkc-man-body-url-error';                    // エラー
+                                $temp_title =   __('The latest HTTP code is in error. You can change it to ignore the error from the edit screen.', $this->text_domain );
+                            }
+                            $html_url_error =   '<span class="'.$temp_class.'" title="'.$temp_title.'">'.$temp_icon.'</span>&nbsp;';
+                        }
+
+                        // 表示用のURL
                         if  ($is_internal ) {
-                            $html_url       .=  '<a href="'.esc_url($url ).'" title="'.esc_url($url ).'" rel="internal" target="_self">';
+                            $temp_href      =   esc_url($url );
+                            $temp_rel       =   'internal';
+                            $temp_target    =   '_self';
                         } else {
-                            $html_url       .=  '<a href="'.esc_url($url ).'" title="'.esc_url($url ).'" rel="external noopenner noreferrer" target="_blank">';
-                        }
-                        $html_url           .=  esc_url($this->pz_DecodeURL($url ) ).'</a>';
+                            $temp_href      =   esc_url($url );
+                            $temp_rel       =   'external noopenner noreferrer';
+                            $temp_target    =   '_blank';
+                        }
+//                      $html_url           =   '<a href="'.$temp_href.'" title="'.$temp_href.'" rel="'.$temp_rel.'" target="'.$temp_target.'">'.esc_url($this->pz_DecodeURL($url ) ).'</a>';
+                        $html_url           =   '<span title="'.$temp_href.'">'.esc_url($this->pz_DecodeURL($url ) ).'</span>';
 
                         // タイトル

pz-linkcard/trunk/lib/pz-linkcard-cacheman.php

@@ -9 +9 @@
     <input type="text" class="pz-lkc-display pz-lkc-hide" name="pz-lkc-develop"    value="<?php echo $this->options['develop-mode']; ?>" />
 <?php
+
     $data               =   null;
     if  (isset($_REQUEST['update'] ) ) {

pz-linkcard/trunk/lib/pz-linkcard-settings.php

@@ -74 +74 @@
     $changelog          =   trim($changelog );
     $changelog          =   esc_html($changelog );
-
     $changelog          =   preg_replace('/^\* /mi', '* ', $changelog);
     $changelog          =   preg_replace('/^  /mi', '  ', $changelog);
-
     $changelog          =   preg_replace('/= (.*) =\n/i', '<h4>'.__('Version', $this->text_domain ).' $1</h4>', $changelog);
     $changelog          =   preg_replace('/(?<=^|(?<=[^a-zA-Z0-9-_\.]))@([A-Za-z]+[A-Za-z0-9_]+)/i', '<a href="http://www.twitter.com/$1" rel="external noopenner noreferrer" target="_blank">@$1</a>', $changelog);

pz-linkcard/trunk/pz-linkcard.php

@@ -5 +5 @@
 Plugin URI:     http://poporon.poponet.jp/pz-linkcard
 Description:    リンクをカード形式で表示します。
-Version:        2.5.0
+Version:        2.5.0.1
 Author:         Poporon
 Author URI:     http://poporon.poponet.jp
@@ -17 +17 @@
     protected   $defaults           =
         array(
-            'plugin-version'        =>  '2.5.0',
+            'plugin-version'        =>  '2.5.0.1',
             'plugin-name'           =>  'Pz-LinkCard',
             'plugin-abbreviation'   =>  'Pz-LkC',
@@ -818 +818 @@
                 // サムネイル取得WebAPI
                 if  ($this->options['thumbnail-api'] ) {
-                    $temp               =   $this->options['thumbnail-api'];
+                    $temp                   =   $this->options['thumbnail-api'];
                     if  (strstr($temp, '%' )    <>  '' ) {
                         $temp               =   preg_replace('/%TITLE%/',       $title,                 $temp );
@@ -827 +827 @@
                     }
                     $html_thumbnail =   '<img class="lkc-thumbnail-img" src="'.$temp.'" alt="'.$thumbnail_alt.'" />';
-
                 }
             }
@@ -848 +847 @@
                 if  ($this->options['favicon-api'] ) {
                     $temp                   =   $this->options['favicon-api'];
-                    if  (strstr($temp, '%' ) === true ) {
+                    if  (strstr($temp, '%' )    <>  '' ) {
+                        $temp               =   preg_replace('/%TITLE%/',       $title,                 $temp );
+                        $temp               =   preg_replace('/%SITE_NAME%/',   $site_name,             $temp );
                         $temp               =   preg_replace('/%DOMAIN_URL%/',  $domain_url,            $temp );
                         $temp               =   preg_replace('/%DOMAIN%/',      $domain,                $temp );

pz-linkcard/trunk/readme.txt

@@ -152 +152 @@
 == Changelog ==
 
+= 2.5.0.1 =
+* カード管理画面にて外部サイトへのリンクを外しました。
+  Fixed: Fixed to remove the link from the URL as a response to the vulnerability.
+* サイトアイコンが取得できない不具合を修正。(Thanks 澤田 芳弘 @SWD on x.com)
+  Fixed: Fixed a bug that site icons could not be retrieved.
+
 = 2.5.0 =
 * WordPress 6.4.2 での動作確認。
@@ -161 +167 @@
 * 文字コードの判定に失敗すると異常終了になってしまう不具合を修正。
   Fixed: Fixed a bug that caused abnormal termination when character code determination failed.
-* 設定画面の「外部リンク」タブ及び「内部リンク」タブの「代替テキスト」にパラメータを追加。(Thanks 澤田 芳弘 @SWD on Twitter)
+* 設定画面の「外部リンク」タブ及び「内部リンク」タブの「代替テキスト」にパラメータを追加。(Thanks 澤田 芳弘 @SWD on x.com)
   Added: Added a parameter to "Alternative Text" in the "External Links" and "Internal Links" tabs of the Settings screen.
 
@@ -173 +179 @@
 * WordPress 6.3.1 での動作確認。
   Compatible with WordPress 6.3.1.
-* カード管理画面にてSQLの構文エラーがあったのを修正。(Thanks @in_seki on Twitter)
+* カード管理画面にてSQLの構文エラーがあったのを修正。(Thanks @in_seki on x.com)
   Fixed: Fixed SQL syntax error in card management screen.
-* 設定画面の「外部リンク」タブに「サムネイル」と「サイトアイコン」の「代替テキスト」の設定を追加。(Thanks @SWD on Twitter)
+* 設定画面の「外部リンク」タブに「サムネイル」と「サイトアイコン」の「代替テキスト」の設定を追加。(Thanks @SWD on x.com)
   Added: Added "ALT Text" settings for "Thumbnail" and "Site Icon" to the "External Links" tab of the Settings page.
-* 設定画面の「内部リンク」タブに「サムネイル」と「サイトアイコン」の「代替テキスト」の設定を追加。(Thanks @SWD on Twitter)
+* 設定画面の「内部リンク」タブに「サムネイル」と「サイトアイコン」の「代替テキスト」の設定を追加。(Thanks @SWD on x.com)
   Added: Added "ALT Text" settings for "Thumbnail" and "Site Icon" to the "Internal Links" tab of the Settings page.
 * 設定画面の「Twitter」のシェア数の単位を「Posts」と「Tweets」から選べる設定を追加。