Changeset 3094116

Timestamp:

05/28/2024 07:12:20 PM (22 months ago)

Author:

baden03

Message:

escaping ID attribute to prevent any funny business

Location:

jquery-collapse-o-matic/trunk

Files:

• README.md (modified) (1 diff)
• collapse-o-matic.php (modified) (3 diffs)
• readme.txt (modified) (3 diffs)

jquery-collapse-o-matic/trunk/README.md

@@ -5 +5 @@
 * Requires at least: 4.9
 * Tested up to: 6.5.3
-* Stable tag: 1.8.5.7
+* Stable tag: 1.8.5.8
 * Requires PHP: 7.2
 * License: GPLv2 or later

jquery-collapse-o-matic/trunk/collapse-o-matic.php

@@ -5 +5 @@
 Plugin URI: https://pluginoven.com/plugins/collapse-o-matic/
 Description: Collapse-O-Matic adds an [expand] shortcode that wraps content into a lovely, jQuery collapsible div.
-Version: 1.8.5.7
+Version: 1.8.5.8
 Author: twinpictures, baden03
 Author URI: https://twinpictures.de/
@@ -30 +30 @@
      * @var string
      */
-    var $version = '1.8.5.7';
+    var $version = '1.8.5.8';
 
     /**
@@ -278 +278 @@
         }
 
-        //id does not allow spaces
-        $id = preg_replace('/\s+/', '_', $id);
-
         $ewo = '';
         $ewc = '';
 
-        //id does not allow spaces
-        $id = preg_replace('/\s+/', '_', $id);
+        //id does not allow spaces or any funny business
+        $id = preg_replace('/\s+/', '_', esc_attr($id));
 
         //placeholders

jquery-collapse-o-matic/trunk/readme.txt

@@ -6 +6 @@
 Requires at least: 4.9
 Tested up to: 6.5.2
-Stable tag: 1.8.5.7
+Stable tag: 1.8.5.8
 Requires PHP: 7.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-Place content inside an expanding/collapsing accordion element.
+Add an expanding/collapsing accordion shortcode.
 
 == Description ==
@@ -51 +51 @@
 
 == Changelog ==
+
+= 1.8.5.8 =
+* the id attribute is escaped to prevent any funny business
+
 
 = 1.8.5.7 =
@@ -440 +444 @@
 
 == Upgrade Notice ==
-* the tag, targtag and elwrap will now also allow the tag defined as the default tag attribute in the plugin settings page.
-* button has been added to the allowed html tag list
+* the id attribute is escaped to prevent any funny business