Changeset 3259203

Timestamp:

03/20/2025 02:38:03 PM (10 months ago)

Author:

canadahelps

Message:

use esc_attr for input args, bump to 1.0.2

Location:

embedded-cdn/trunk

Files:

• README.txt (modified) (1 diff)
• embedded-cdn.php (modified) (2 diffs)

embedded-cdn/trunk/README.txt

@@ -5 +5 @@
 Requires at least: 3.0
 Tested up to: 6.7
-Stable tag: 1.0.1
+Stable tag: 1.0.2
 License: GPLv3
 License URI: https://www.gnu.org/licenses/gpl-3.0.html

embedded-cdn/trunk/embedded-cdn.php

@@ -4 +4 @@
 Plugin URI:  https://github.com/CanadaHelps/embedded-cdn
 Description: Adds a shortcode to support embedded custom donate now pages. [embedcdn id="168"]
-Version:     1.0.1
+Version:     1.0.2
 Author:      CanadaHelps.org
 Author URI:  https://www.canadahelps.org/
@@ -39 +39 @@
     $html .= ' type="text/javascript"';
     $html .= ' data-cfasync="false"';
-    $html .= ' data-page-id="' . $atts["id"] . '"';
-    $html .= ' data-language="' . $atts["language"] . '"';
+    $html .= ' data-page-id="' . esc_attr($atts["id"]) . '"';
+    $html .= ' data-language="' . esc_attr($atts["language"]) . '"';
     $html .= ' src="https://www.canadahelps.org/services/wa/js/apps/donatenow/embed.min.js"';
     $html .= '></script>';