WordPress.org
Get WordPress

Plugin Directory

Changeset 3101672


Ignore:
Timestamp:
06/12/2024 09:36:54 AM (18 months ago)
Author:
Nikschavan
Message:

Update to version 1.6.36 from GitHub

Location:
header-footer-elementor
Files:
14 edited
1 copied

Legend:

Unmodified
Added
Removed

  • header-footer-elementor/tags/1.6.36/header-footer-elementor.php

    r3095099 r3101672  
    88 * Text Domain: header-footer-elementor
    99 * Domain Path: /languages
    10  * Version: 1.6.35
     10 * Version: 1.6.36
    1111 * Elementor tested up to: 3.22
    1212 * Elementor Pro tested up to: 3.22
    … …  
    1515 */
    1616
    17 define( 'HFE_VER', '1.6.35' );
     17define( 'HFE_VER', '1.6.36' );
    1818define( 'HFE_FILE', __FILE__ );
    1919define( 'HFE_DIR', plugin_dir_path( __FILE__ ) );

  • header-footer-elementor/tags/1.6.36/inc/widgets-manager/widgets/class-navigation-menu.php

    r3034938 r3101672  
    19261926        if ( 'yes' === $settings['schema_support'] ) {
    19271927            $this->add_render_attribute( 'hfe-nav-menu', 'itemscope', 'itemscope' );
    1928             $this->add_render_attribute( 'hfe-nav-menu', 'itemtype', 'http://schema.org/SiteNavigationElement' );
     1928            $this->add_render_attribute( 'hfe-nav-menu', 'itemtype', 'https://schema.org/SiteNavigationElement' );
    19291929
    19301930            add_filter( 'hfe_nav_menu_attrs', [ $this, 'handle_link_attrs' ] );

  • header-footer-elementor/tags/1.6.36/inc/widgets-manager/widgets/class-page-title.php

    r3070659 r3101672  
    475475
    476476        if ( '' != settings.page_heading_link.url ) {
    477             view.addRenderAttribute( 'url', 'href', settings.page_heading_link.url );
     477            var urlPattern = /^(https?|ftp):\/\/[^\s/$.?#].[^\s]*$|^www\.[^\s/$.?#].[^\s]*$/;
     478            if( urlPattern.test( settings.page_heading_link.url ) ){
     479                var sanitizedPgUrl = _.escape( settings.page_heading_link.url );
     480                view.addRenderAttribute( 'url', 'href', sanitizedPgUrl );
     481            }
    478482        }
    479483        var iconHTML = elementor.helpers.renderIcon( view, settings.new_page_title_select_icon, { 'aria-hidden': true }, 'i' , 'object' );
    480484
    481         var headingSizeTag = settings.heading_tag;
     485        var headingSizeTag = elementor.helpers.validateHTMLTag( settings.heading_tag );
    482486
    483487        if ( typeof elementor.helpers.validateHTMLTag === "function" ) {
    … …  
    498502                    </span>
    499503                <# } #>
    500                     <# if ( '' != settings.before ) { #>
    501                         {{{ settings.before }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     504                    <# if ( '' != settings.before ) {
     505                        var before = elementor.helpers.sanitize( settings.before ) #>
     506                        {{{ before }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    502507                    <# } #>
    503508                    <?php
    … …  
    508513                    }
    509514                    ?>
    510                     <# if ( '' != settings.after ) { #>
    511                         {{{ settings.after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     515                    <# if ( '' != settings.after ) {
     516                        var after = elementor.helpers.sanitize( settings.after )#>
     517                        {{{ after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    512518                    <# } #>             
    513519            </{{{ headingSizeTag }}}> <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>

  • header-footer-elementor/tags/1.6.36/inc/widgets-manager/widgets/class-site-tagline.php

    r3003681 r3101672  
    307307            <# } #>
    308308            <span>
    309             <#if ( '' != settings.before ){#>
    310                 {{{ settings.before}}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     309            <#if ( '' != settings.before ){
     310                var before = elementor.helpers.sanitize( settings.before ) #>
     311                {{{ before }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    311312            <#}#>
    312313            <?php echo wp_kses_post( get_bloginfo( 'description' ) ); ?>
    313             <# if ( '' != settings.after ){#>
    314                 {{{ settings.after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     314            <# if ( '' != settings.after ){
     315                var after = elementor.helpers.sanitize( settings.after ) #>
     316                {{{ after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    315317            <#}#>
    316318            </span>

  • header-footer-elementor/tags/1.6.36/inc/widgets-manager/widgets/class-site-title.php

    r3003681 r3101672  
    459459        }
    460460        if ( '' != settings.heading_link.url ) {
    461             view.addRenderAttribute( 'url', 'href', settings.heading_link.url );
     461            var urlPattern = /^(https?|ftp):\/\/[^\s/$.?#].[^\s]*$|^www\.[^\s/$.?#].[^\s]*$/;
     462            if ( urlPattern.test( settings.heading_link.url ) ) {
     463                var sanitizedUrl = _.escape( settings.heading_link.url );
     464                view.addRenderAttribute( 'url', 'href', sanitizedUrl );
     465            }
    462466        }
    463467        var iconHTML = elementor.helpers.renderIcon( view, settings.icon, { 'aria-hidden': true }, 'i' , 'object' );
    464468
    465         var headingSizeTag = settings.heading_tag;
     469        var headingSizeTag = elementor.helpers.validateHTMLTag( settings.heading_tag );
    466470
    467471        if ( typeof elementor.helpers.validateHTMLTag === "function" ) {
    … …  
    476480                    <a {{{ view.getRenderAttributeString( 'url' ) }}} > <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    477481                <# } #>
    478                 <{{{ headingSizeTag }}} class="hfe-heading elementor-heading-title elementor-size-{{{ settings.size }}}"> <?php //phpcs:ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     482                <{{{ headingSizeTag }}} class="hfe-heading elementor-heading-title elementor-size-{{{ elementor.helpers.sanitize( settings.size ) }}}"> <?php //phpcs:ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    479483                <# if( '' != settings.icon.value ){ #>
    480484                <span class="hfe-icon">
    … …  
    483487                <# } #>
    484488                <span class="hfe-heading-text  elementor-heading-title" data-elementor-setting-key="heading_title" data-elementor-inline-editing-toolbar="basic" >
    485                 <#if ( '' != settings.before ){#>
    486                     {{{ settings.before }}}  <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     489                <# if ( '' != settings.before ){
     490                    var before = elementor.helpers.sanitize( settings.before )#>
     491                    {{{ before }}}  <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    487492                <#}#>
    488493                <?php echo wp_kses_post( get_bloginfo( 'name' ) ); ?>
    489                 <# if ( '' != settings.after ){#>
    490                     {{{ settings.after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     494                <# if ( '' != settings.after ){
     495                    var after = elementor.helpers.sanitize( settings.after )#>
     496                    {{{ after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    491497                <#}#>
    492498                </span>

  • header-footer-elementor/tags/1.6.36/languages/header-footer-elementor.pot

    r3095099 r3101672  
    33msgid ""
    44msgstr ""
    5 "Project-Id-Version: Elementor Header & Footer Builder 1.6.35\n"
     5"Project-Id-Version: Elementor Header & Footer Builder 1.6.36\n"
    66"Report-Msgid-Bugs-To: "
    77"https://wordpress.org/support/plugin/header-footer-elementor\n"
    8 "POT-Creation-Date: 2024-05-29 07:30:13+00:00\n"
     8"POT-Creation-Date: 2024-06-12 05:43:35+00:00\n"
    99"MIME-Version: 1.0\n"
    1010"Content-Type: text/plain; charset=utf-8\n"

  • header-footer-elementor/tags/1.6.36/readme.txt

    r3095099 r3101672  
    66Requires PHP: 5.4
    77Tested up to: 6.5
    8 Stable tag: 1.6.35
     8Stable tag: 1.6.36
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    141141== Changelog ==
    142142
     143= 1.6.36 =
     144- Fix: This update addressed a security bug. Props to Wordfence for privately reporting it to our team. Please make sure you are using the latest version on your website.
     145
    143146= 1.6.35 =
    144147- Improvement: Compatibility with latest Elementor and Elementor Pro 3.22 version.

  • header-footer-elementor/trunk/header-footer-elementor.php

    r3095099 r3101672  
    88 * Text Domain: header-footer-elementor
    99 * Domain Path: /languages
    10  * Version: 1.6.35
     10 * Version: 1.6.36
    1111 * Elementor tested up to: 3.22
    1212 * Elementor Pro tested up to: 3.22
    … …  
    1515 */
    1616
    17 define( 'HFE_VER', '1.6.35' );
     17define( 'HFE_VER', '1.6.36' );
    1818define( 'HFE_FILE', __FILE__ );
    1919define( 'HFE_DIR', plugin_dir_path( __FILE__ ) );

  • header-footer-elementor/trunk/inc/widgets-manager/widgets/class-navigation-menu.php

    r3034938 r3101672  
    19261926        if ( 'yes' === $settings['schema_support'] ) {
    19271927            $this->add_render_attribute( 'hfe-nav-menu', 'itemscope', 'itemscope' );
    1928             $this->add_render_attribute( 'hfe-nav-menu', 'itemtype', 'http://schema.org/SiteNavigationElement' );
     1928            $this->add_render_attribute( 'hfe-nav-menu', 'itemtype', 'https://schema.org/SiteNavigationElement' );
    19291929
    19301930            add_filter( 'hfe_nav_menu_attrs', [ $this, 'handle_link_attrs' ] );

  • header-footer-elementor/trunk/inc/widgets-manager/widgets/class-page-title.php

    r3070659 r3101672  
    475475
    476476        if ( '' != settings.page_heading_link.url ) {
    477             view.addRenderAttribute( 'url', 'href', settings.page_heading_link.url );
     477            var urlPattern = /^(https?|ftp):\/\/[^\s/$.?#].[^\s]*$|^www\.[^\s/$.?#].[^\s]*$/;
     478            if( urlPattern.test( settings.page_heading_link.url ) ){
     479                var sanitizedPgUrl = _.escape( settings.page_heading_link.url );
     480                view.addRenderAttribute( 'url', 'href', sanitizedPgUrl );
     481            }
    478482        }
    479483        var iconHTML = elementor.helpers.renderIcon( view, settings.new_page_title_select_icon, { 'aria-hidden': true }, 'i' , 'object' );
    480484
    481         var headingSizeTag = settings.heading_tag;
     485        var headingSizeTag = elementor.helpers.validateHTMLTag( settings.heading_tag );
    482486
    483487        if ( typeof elementor.helpers.validateHTMLTag === "function" ) {
    … …  
    498502                    </span>
    499503                <# } #>
    500                     <# if ( '' != settings.before ) { #>
    501                         {{{ settings.before }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     504                    <# if ( '' != settings.before ) {
     505                        var before = elementor.helpers.sanitize( settings.before ) #>
     506                        {{{ before }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    502507                    <# } #>
    503508                    <?php
    … …  
    508513                    }
    509514                    ?>
    510                     <# if ( '' != settings.after ) { #>
    511                         {{{ settings.after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     515                    <# if ( '' != settings.after ) {
     516                        var after = elementor.helpers.sanitize( settings.after )#>
     517                        {{{ after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    512518                    <# } #>             
    513519            </{{{ headingSizeTag }}}> <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>

  • header-footer-elementor/trunk/inc/widgets-manager/widgets/class-site-tagline.php

    r3003681 r3101672  
    307307            <# } #>
    308308            <span>
    309             <#if ( '' != settings.before ){#>
    310                 {{{ settings.before}}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     309            <#if ( '' != settings.before ){
     310                var before = elementor.helpers.sanitize( settings.before ) #>
     311                {{{ before }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    311312            <#}#>
    312313            <?php echo wp_kses_post( get_bloginfo( 'description' ) ); ?>
    313             <# if ( '' != settings.after ){#>
    314                 {{{ settings.after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     314            <# if ( '' != settings.after ){
     315                var after = elementor.helpers.sanitize( settings.after ) #>
     316                {{{ after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    315317            <#}#>
    316318            </span>

  • header-footer-elementor/trunk/inc/widgets-manager/widgets/class-site-title.php

    r3003681 r3101672  
    459459        }
    460460        if ( '' != settings.heading_link.url ) {
    461             view.addRenderAttribute( 'url', 'href', settings.heading_link.url );
     461            var urlPattern = /^(https?|ftp):\/\/[^\s/$.?#].[^\s]*$|^www\.[^\s/$.?#].[^\s]*$/;
     462            if ( urlPattern.test( settings.heading_link.url ) ) {
     463                var sanitizedUrl = _.escape( settings.heading_link.url );
     464                view.addRenderAttribute( 'url', 'href', sanitizedUrl );
     465            }
    462466        }
    463467        var iconHTML = elementor.helpers.renderIcon( view, settings.icon, { 'aria-hidden': true }, 'i' , 'object' );
    464468
    465         var headingSizeTag = settings.heading_tag;
     469        var headingSizeTag = elementor.helpers.validateHTMLTag( settings.heading_tag );
    466470
    467471        if ( typeof elementor.helpers.validateHTMLTag === "function" ) {
    … …  
    476480                    <a {{{ view.getRenderAttributeString( 'url' ) }}} > <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    477481                <# } #>
    478                 <{{{ headingSizeTag }}} class="hfe-heading elementor-heading-title elementor-size-{{{ settings.size }}}"> <?php //phpcs:ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     482                <{{{ headingSizeTag }}} class="hfe-heading elementor-heading-title elementor-size-{{{ elementor.helpers.sanitize( settings.size ) }}}"> <?php //phpcs:ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    479483                <# if( '' != settings.icon.value ){ #>
    480484                <span class="hfe-icon">
    … …  
    483487                <# } #>
    484488                <span class="hfe-heading-text  elementor-heading-title" data-elementor-setting-key="heading_title" data-elementor-inline-editing-toolbar="basic" >
    485                 <#if ( '' != settings.before ){#>
    486                     {{{ settings.before }}}  <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     489                <# if ( '' != settings.before ){
     490                    var before = elementor.helpers.sanitize( settings.before )#>
     491                    {{{ before }}}  <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    487492                <#}#>
    488493                <?php echo wp_kses_post( get_bloginfo( 'name' ) ); ?>
    489                 <# if ( '' != settings.after ){#>
    490                     {{{ settings.after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
     494                <# if ( '' != settings.after ){
     495                    var after = elementor.helpers.sanitize( settings.after )#>
     496                    {{{ after }}} <?php // PHPCS:Ignore WordPressVIPMinimum.Security.Mustache.OutputNotation ?>
    491497                <#}#>
    492498                </span>

  • header-footer-elementor/trunk/languages/header-footer-elementor.pot

    r3095099 r3101672  
    33msgid ""
    44msgstr ""
    5 "Project-Id-Version: Elementor Header & Footer Builder 1.6.35\n"
     5"Project-Id-Version: Elementor Header & Footer Builder 1.6.36\n"
    66"Report-Msgid-Bugs-To: "
    77"https://wordpress.org/support/plugin/header-footer-elementor\n"
    8 "POT-Creation-Date: 2024-05-29 07:30:13+00:00\n"
     8"POT-Creation-Date: 2024-06-12 05:43:35+00:00\n"
    99"MIME-Version: 1.0\n"
    1010"Content-Type: text/plain; charset=utf-8\n"

  • header-footer-elementor/trunk/readme.txt

    r3095099 r3101672  
    66Requires PHP: 5.4
    77Tested up to: 6.5
    8 Stable tag: 1.6.35
     8Stable tag: 1.6.36
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    141141== Changelog ==
    142142
     143= 1.6.36 =
     144- Fix: This update addressed a security bug. Props to Wordfence for privately reporting it to our team. Please make sure you are using the latest version on your website.
     145
    143146= 1.6.35 =
    144147- Improvement: Compatibility with latest Elementor and Elementor Pro 3.22 version.
Note: See TracChangeset for help on using the changeset viewer.