Changeset 3193515

Timestamp:

11/20/2024 09:56:53 PM (16 months ago)

Author:

sebd86

Message:

Releasing 4.3.12

Location:

cart-rest-api-for-woocommerce

Files:

• tags/4.3.12 (copied) (copied from cart-rest-api-for-woocommerce/trunk)
• tags/4.3.12/assets/js/admin/plugin-search.min.js (modified) (1 diff)
• tags/4.3.12/cart-rest-api-for-woocommerce.php (modified) (1 diff)
• tags/4.3.12/includes/class-cocart.php (modified) (1 diff)
• tags/4.3.12/includes/classes/rest-api/class-cocart-rest-api.php (modified) (1 diff)
• tags/4.3.12/includes/classes/utilities/class-cocart-utilities-product-helpers.php (modified) (1 diff)
• tags/4.3.12/languages/cart-rest-api-for-woocommerce.pot (modified) (1 diff)
• tags/4.3.12/load-package.php (modified) (1 diff)
• tags/4.3.12/phpstan.neon (deleted)
• tags/4.3.12/readme.txt (modified) (3 diffs)
• trunk/assets/js/admin/plugin-search.min.js (modified) (1 diff)
• trunk/cart-rest-api-for-woocommerce.php (modified) (1 diff)
• trunk/includes/class-cocart.php (modified) (1 diff)
• trunk/includes/classes/rest-api/class-cocart-rest-api.php (modified) (1 diff)
• trunk/includes/classes/utilities/class-cocart-utilities-product-helpers.php (modified) (1 diff)
• trunk/languages/cart-rest-api-for-woocommerce.pot (modified) (1 diff)
• trunk/load-package.php (modified) (1 diff)
• trunk/phpstan.neon (deleted)
• trunk/readme.txt (modified) (3 diffs)

cart-rest-api-for-woocommerce/tags/4.3.12/assets/js/admin/plugin-search.min.js

@@ -1 @@
-/*! CoCart API - Decoupling Made Easy for WooCommerce v4.3.11 Wednesday 20th November 2024 19:01:26 PM GMT+0100 */
+/*! CoCart API - Decoupling Made Easy for WooCommerce v4.3.12 Wednesday 20th November 2024 22:37:38 PM GMT+0100 */
 var CoCartPS={};(a=>{(CoCartPS={$pluginFilter:a("#plugin-filter"),$addOns:a("body.cocart-plugin-install #plugin-filter"),getSuggestion:function(){return document.querySelector(".plugin-card-cocart-plugin-search")},getCard:function(){return document.querySelectorAll("body.cocart-plugin-install .plugin-card:not(.plugin-card-cocart-plugin-search)")},updateCardTitle:function(){var e,t=CoCartPS.getSuggestion(),r=CoCartPS.getCard();"object"==typeof t&&null!==t&&(e=t.querySelector(".column-name h3"),t=t.querySelector(".column-name h3 strong"),a(e).after("<strong>"+a(t).text()+"</strong>"),a(t).remove()),"object"==typeof r&&null!==r&&r.forEach(function(e,t){var r=e.querySelector(".column-name h3"),e=e.querySelector("p.authors");0<a(e).length&&a(r).after("<strong>"+a(e).text()+"</strong>"),a(e).remove()})},unlinkCardTitle:function(){var e=CoCartPS.getSuggestion(),t=CoCartPS.getCard();"object"==typeof e&&null!==e&&(e=e.querySelector(".column-name h3 a"),a(e).outerHTML=a(e).replaceWith(a(e).html())),"object"==typeof t&&null!==t&&t.forEach(function(e,t){e=e.querySelector(".column-name h3 a");a(e).outerHTML=a(e).replaceWith(a(e).html())})},moveActionLinks:function(){var e,t,r=CoCartPS.getSuggestion();"object"==typeof r&&null!==r&&(t=(e=r.querySelector(".column-description")).querySelector("p:first-child"),r=r.querySelector(".action-links"),e.innerHTML=t.outerHTML+r.outerHTML,r.parentNode.removeChild(r))},replaceCardBottom:function(){var e=CoCartPS.getSuggestion(),t=CoCartPS.getCard();"object"==typeof e&&null!==e&&(e.querySelector(".plugin-card-bottom").outerHTML='<div class="cocart-plugin-search__bottom"><p class="cocart-plugin-search__text">'+CoCartPluginSearch.legend+' <a class="cocart-plugin-search__support_link" href="'+CoCartPluginSearch.supportLink+'" target="_blank" rel="noopener noreferrer" data-track="support_link" >'+CoCartPluginSearch.supportText+"</a></p></div>"),"object"==typeof t&&null!==t&&t.forEach(function(e,t){var r=e.querySelector(".plugin-card-bottom"),o=e.querySelector(".column-rating"),n=e.querySelector(".column-downloaded"),l=e.querySelector(".column-updated"),e=e.querySelector(".plugin-requirement");o.remove(),n.remove(),l.remove(),0<a(e).length&&r.append(e)})},hideCoreCard:function(){var e=document.querySelector("body.cocart-plugin-install .plugin-card.plugin-card-cart-rest-api-for-woocommerce");0<a(e).length&&e.remove()},reset:function(){var e=document.querySelector("body"),t=document.querySelector(".cocart-plugin-install-dashboard");a(e).hasClass("cocart-plugin-install")&&a(e).removeClass("cocart-plugin-install"),0<a(t).length&&a(t).remove()},replaceOnNewResults:function(e){e.forEach(function(e){"childList"===e.type&&1===document.querySelectorAll(".plugin-card-cocart-plugin-search").length&&(CoCartPS.reset(),CoCartPS.unlinkCardTitle(),CoCartPS.updateCardTitle(),CoCartPS.moveActionLinks(),CoCartPS.replaceCardBottom())})},init:function(){CoCartPS.$pluginFilter.length<1||(CoCartPS.unlinkCardTitle(),CoCartPS.updateCardTitle(),CoCartPS.moveActionLinks(),CoCartPS.replaceCardBottom(),CoCartPS.hideCoreCard(),new MutationObserver(CoCartPS.replaceOnNewResults).observe(document.getElementById("plugin-filter"),{childList:!0}))}}).init()})(jQuery,CoCartPluginSearch);

cart-rest-api-for-woocommerce/tags/4.3.12/cart-rest-api-for-woocommerce.php

@@ -6 +6 @@
  * Author:      CoCart Headless, LLC
  * Author URI:  https://cocartapi.com
- * Version:     4.3.11
+ * Version:     4.3.12
  * Text Domain: cart-rest-api-for-woocommerce
  * Domain Path: /languages/

cart-rest-api-for-woocommerce/tags/4.3.12/includes/class-cocart.php

@@ -29 +29 @@
      * @var string
      */
-    public static $version = '4.3.11';
+    public static $version = '4.3.12';
 
     /**

cart-rest-api-for-woocommerce/tags/4.3.12/includes/classes/rest-api/class-cocart-rest-api.php

@@ -437 +437 @@
                     if ( ! $timezone_string ) {
                         // Fallback to the offset if no timezone string is set.
-                        $offset = get_option( 'gmt_offset', 0 );
+                        $offset          = get_option( 'gmt_offset', 0 );
                         $timezone_string = timezone_name_from_abbr( '', $offset * 3600, 0 );
                     }

cart-rest-api-for-woocommerce/tags/4.3.12/includes/classes/utilities/class-cocart-utilities-product-helpers.php

@@ -306 +306 @@
             $ignore_meta = false;
 
+            // Should the meta key start with an underscore prefix, ignore it as it is suppose to be hidden from public.
+            if ( str_starts_with( $meta->key, '_' ) ) {
+                $ignore_meta = true;
+                break;
+            }
+
             foreach ( $ignore_private_meta_keys as $ignore ) {
                 if ( str_starts_with( $meta->key, $ignore ) ) {

cart-rest-api-for-woocommerce/tags/4.3.12/languages/cart-rest-api-for-woocommerce.pot

@@ -4 +4 @@
 msgstr ""
 "Project-Id-Version: CoCart API - Decoupling Made Easy for WooCommerce "
-"4.3.11\n"
+"4.3.12\n"
 "Report-Msgid-Bugs-To: https://github.com/co-cart/co-cart/issues\n"
-"POT-Creation-Date: 2024-11-20 18:02:06+00:00\n"
+"POT-Creation-Date: 2024-11-20 21:38:47+00:00\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=utf-8\n"

cart-rest-api-for-woocommerce/tags/4.3.12/load-package.php

@@ -3 +3 @@
  * This file is designed to be used to load as package NOT a WP plugin!
  *
- * @version 4.3.11
+ * @version 4.3.12
  * @package CoCart
  */

cart-rest-api-for-woocommerce/tags/4.3.12/readme.txt

@@ -5 +5 @@
 Requires PHP: 7.4
 Tested up to: 6.7
-Stable tag: 4.3.11
+Stable tag: 4.3.12
 WC requires at least: 7.0
 WC tested up to: 9.4
@@ -306 +306 @@
 
 == Changelog ==
+
+= v4.3.12 - 20th November, 2024 =
+
+### Security Patch
+
+It appears that the rules of hidden and private meta is not respected and is still exposed on products that have such meta. This security patch ignores any meta data that is still leaking publically without authorization.
 
 = v4.3.11 - 20th November, 2024 =
@@ -681 +687 @@
 == Upgrade Notice ==
 
+= 4.3.12 =
+
+SECURITY PATCH, PLEASE UPDATE TO STAY SAFE - THANK YOU!
+
 = 4.3.11 =
 

cart-rest-api-for-woocommerce/trunk/assets/js/admin/plugin-search.min.js

@@ -1 @@
-/*! CoCart API - Decoupling Made Easy for WooCommerce v4.3.11 Wednesday 20th November 2024 19:01:26 PM GMT+0100 */
+/*! CoCart API - Decoupling Made Easy for WooCommerce v4.3.12 Wednesday 20th November 2024 22:37:38 PM GMT+0100 */
 var CoCartPS={};(a=>{(CoCartPS={$pluginFilter:a("#plugin-filter"),$addOns:a("body.cocart-plugin-install #plugin-filter"),getSuggestion:function(){return document.querySelector(".plugin-card-cocart-plugin-search")},getCard:function(){return document.querySelectorAll("body.cocart-plugin-install .plugin-card:not(.plugin-card-cocart-plugin-search)")},updateCardTitle:function(){var e,t=CoCartPS.getSuggestion(),r=CoCartPS.getCard();"object"==typeof t&&null!==t&&(e=t.querySelector(".column-name h3"),t=t.querySelector(".column-name h3 strong"),a(e).after("<strong>"+a(t).text()+"</strong>"),a(t).remove()),"object"==typeof r&&null!==r&&r.forEach(function(e,t){var r=e.querySelector(".column-name h3"),e=e.querySelector("p.authors");0<a(e).length&&a(r).after("<strong>"+a(e).text()+"</strong>"),a(e).remove()})},unlinkCardTitle:function(){var e=CoCartPS.getSuggestion(),t=CoCartPS.getCard();"object"==typeof e&&null!==e&&(e=e.querySelector(".column-name h3 a"),a(e).outerHTML=a(e).replaceWith(a(e).html())),"object"==typeof t&&null!==t&&t.forEach(function(e,t){e=e.querySelector(".column-name h3 a");a(e).outerHTML=a(e).replaceWith(a(e).html())})},moveActionLinks:function(){var e,t,r=CoCartPS.getSuggestion();"object"==typeof r&&null!==r&&(t=(e=r.querySelector(".column-description")).querySelector("p:first-child"),r=r.querySelector(".action-links"),e.innerHTML=t.outerHTML+r.outerHTML,r.parentNode.removeChild(r))},replaceCardBottom:function(){var e=CoCartPS.getSuggestion(),t=CoCartPS.getCard();"object"==typeof e&&null!==e&&(e.querySelector(".plugin-card-bottom").outerHTML='<div class="cocart-plugin-search__bottom"><p class="cocart-plugin-search__text">'+CoCartPluginSearch.legend+' <a class="cocart-plugin-search__support_link" href="'+CoCartPluginSearch.supportLink+'" target="_blank" rel="noopener noreferrer" data-track="support_link" >'+CoCartPluginSearch.supportText+"</a></p></div>"),"object"==typeof t&&null!==t&&t.forEach(function(e,t){var r=e.querySelector(".plugin-card-bottom"),o=e.querySelector(".column-rating"),n=e.querySelector(".column-downloaded"),l=e.querySelector(".column-updated"),e=e.querySelector(".plugin-requirement");o.remove(),n.remove(),l.remove(),0<a(e).length&&r.append(e)})},hideCoreCard:function(){var e=document.querySelector("body.cocart-plugin-install .plugin-card.plugin-card-cart-rest-api-for-woocommerce");0<a(e).length&&e.remove()},reset:function(){var e=document.querySelector("body"),t=document.querySelector(".cocart-plugin-install-dashboard");a(e).hasClass("cocart-plugin-install")&&a(e).removeClass("cocart-plugin-install"),0<a(t).length&&a(t).remove()},replaceOnNewResults:function(e){e.forEach(function(e){"childList"===e.type&&1===document.querySelectorAll(".plugin-card-cocart-plugin-search").length&&(CoCartPS.reset(),CoCartPS.unlinkCardTitle(),CoCartPS.updateCardTitle(),CoCartPS.moveActionLinks(),CoCartPS.replaceCardBottom())})},init:function(){CoCartPS.$pluginFilter.length<1||(CoCartPS.unlinkCardTitle(),CoCartPS.updateCardTitle(),CoCartPS.moveActionLinks(),CoCartPS.replaceCardBottom(),CoCartPS.hideCoreCard(),new MutationObserver(CoCartPS.replaceOnNewResults).observe(document.getElementById("plugin-filter"),{childList:!0}))}}).init()})(jQuery,CoCartPluginSearch);

cart-rest-api-for-woocommerce/trunk/cart-rest-api-for-woocommerce.php

@@ -6 +6 @@
  * Author:      CoCart Headless, LLC
  * Author URI:  https://cocartapi.com
- * Version:     4.3.11
+ * Version:     4.3.12
  * Text Domain: cart-rest-api-for-woocommerce
  * Domain Path: /languages/

cart-rest-api-for-woocommerce/trunk/includes/class-cocart.php

@@ -29 +29 @@
      * @var string
      */
-    public static $version = '4.3.11';
+    public static $version = '4.3.12';
 
     /**

cart-rest-api-for-woocommerce/trunk/includes/classes/rest-api/class-cocart-rest-api.php

@@ -437 +437 @@
                     if ( ! $timezone_string ) {
                         // Fallback to the offset if no timezone string is set.
-                        $offset = get_option( 'gmt_offset', 0 );
+                        $offset          = get_option( 'gmt_offset', 0 );
                         $timezone_string = timezone_name_from_abbr( '', $offset * 3600, 0 );
                     }

cart-rest-api-for-woocommerce/trunk/includes/classes/utilities/class-cocart-utilities-product-helpers.php

@@ -306 +306 @@
             $ignore_meta = false;
 
+            // Should the meta key start with an underscore prefix, ignore it as it is suppose to be hidden from public.
+            if ( str_starts_with( $meta->key, '_' ) ) {
+                $ignore_meta = true;
+                break;
+            }
+
             foreach ( $ignore_private_meta_keys as $ignore ) {
                 if ( str_starts_with( $meta->key, $ignore ) ) {

cart-rest-api-for-woocommerce/trunk/languages/cart-rest-api-for-woocommerce.pot

@@ -4 +4 @@
 msgstr ""
 "Project-Id-Version: CoCart API - Decoupling Made Easy for WooCommerce "
-"4.3.11\n"
+"4.3.12\n"
 "Report-Msgid-Bugs-To: https://github.com/co-cart/co-cart/issues\n"
-"POT-Creation-Date: 2024-11-20 18:02:06+00:00\n"
+"POT-Creation-Date: 2024-11-20 21:38:47+00:00\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=utf-8\n"

cart-rest-api-for-woocommerce/trunk/load-package.php

@@ -3 +3 @@
  * This file is designed to be used to load as package NOT a WP plugin!
  *
- * @version 4.3.11
+ * @version 4.3.12
  * @package CoCart
  */

cart-rest-api-for-woocommerce/trunk/readme.txt

@@ -5 +5 @@
 Requires PHP: 7.4
 Tested up to: 6.7
-Stable tag: 4.3.11
+Stable tag: 4.3.12
 WC requires at least: 7.0
 WC tested up to: 9.4
@@ -306 +306 @@
 
 == Changelog ==
+
+= v4.3.12 - 20th November, 2024 =
+
+### Security Patch
+
+It appears that the rules of hidden and private meta is not respected and is still exposed on products that have such meta. This security patch ignores any meta data that is still leaking publically without authorization.
 
 = v4.3.11 - 20th November, 2024 =
@@ -681 +687 @@
 == Upgrade Notice ==
 
+= 4.3.12 =
+
+SECURITY PATCH, PLEASE UPDATE TO STAY SAFE - THANK YOU!
+
 = 4.3.11 =