Changeset 3310559

Timestamp:

06/12/2025 02:07:57 PM (8 months ago)

Author:

data443

Message:

Update to version 3.9.0. Do more input sanitization.

Location:

intelly-related-posts/trunk

Files:

• includes/classes/utils/AppOptions.php (modified) (1 diff)
• includes/core.php (modified) (1 diff)
• index.php (modified) (2 diffs)
• readme.txt (modified) (1 diff)

intelly-related-posts/trunk/includes/classes/utils/AppOptions.php

@@ -188 +188 @@
             }
         }
-        if (isset($result['linkTarget']) && !empty($result['linkTarget']))
-        {
-            if ($result['linkTarget'] !== '_blank')
-            {
-                if ($result['linkTarget'] !== '_self')
-                {
-                    $result['linkTarget'] = '_blank';
-                }
-            }
-        }
-        if (isset($result['linkRel']) && !empty($result['linkRel']))
-        {
-            if ($result['linkRel'] !== 'dofollow')
-            {
-                if ($result['linkRel'] !== 'nofollow')
-                {
-                    $result['linkRel'] = 'nofollow';
-                }
-            }
+        if (!empty($result['linkTarget']) && !in_array($result['linkTarget'], ['_blank', '_self'], true)) {
+            $result['linkTarget'] = '_blank';
+        }
+        if (!empty($result['linkRel']) && !in_array($result['linkRel'], ['dofollow', 'nofollow'], true)) {
+            $result['linkRel'] = 'nofollow';
         }
         return $result;
     }
     public function setTemplateStyle($value) {
-        if (isset($value['linkTarget']) && !empty($value['linkTarget']))
-        {
-            if ($value['linkTarget'] !== '_blank')
-            {
-                if ($value['linkTarget'] !== '_self')
-                {
-                    $value['linkTarget'] = '_blank';
-                }
-            }
-        }
-        if (isset($value['linkRel']) && !empty($value['linkRel']))
-        {
-            if ($value['linkRel'] !== 'dofollow')
-            {
-                if ($value['linkRel'] !== 'nofollow')
-                {
-                    $value['linkRel'] = 'nofollow';
-                }
-            }
+        if (!empty($value['linkTarget']) && !in_array($value['linkTarget'], ['_blank', '_self'], true)) {
+            $value['linkTarget'] = '_blank';
+        }
+        if (!empty($value['linkRel']) && !in_array($value['linkRel'], ['dofollow', 'nofollow'], true)) {
+            $value['linkRel'] = 'nofollow';
         }
         $this->setOption('TemplateStyle', $value);

intelly-related-posts/trunk/includes/core.php

@@ -149 +149 @@
         }
 
-        $options['ctaText'] = do_shortcode( $options['ctaText'] );
+        $options['ctaText'] = do_shortcode( wp_kses_post( $options['ctaText'] ) );
 
         $posts=array();

intelly-related-posts/trunk/index.php

@@ -7 +7 @@
 Author URI: https://Data443.com/
 Email: [email protected]
-Version: 3.8.0
+Version: 3.9.0
 Requires at least: 3.6.0
 Requires PHP: 5.6
@@ -21 +21 @@
 define('IRP_PLUGIN_SLUG', 'intelly-related-posts');
 define('IRP_PLUGIN_NAME', 'Inline Related Posts');
-define('IRP_PLUGIN_VERSION', '3.8.0');
+define('IRP_PLUGIN_VERSION', '3.9.0');
 define('IRP_PLUGIN_AUTHOR', 'Data443');
 define('IRP_PLUGIN_ROOT', dirname(__FILE__).'/');

intelly-related-posts/trunk/readme.txt

@@ -106 +106 @@
 For detailed release notes, see our documentation here: [https://intellywp.com/docs/](https://data443.atlassian.net/servicedesk/customer/portal/17/article/858652673).
 
+= 3.9.0 =
+*Release Date - 2025-6-12*
+
+* Do additional sanitization of inputs (RDU-1629)
+
 = 3.8.0 =
 *Release Date - 2024-7-3*