Changeset 3397032

Timestamp:

11/17/2025 09:51:01 AM (3 months ago)

Author:

envothemes

Message:

v1.9.12

Location:

envo-extra/trunk

Files:

• envo-extra.php (modified) (1 diff)
• lib/elementor/widgets/counter/counter.php (modified) (2 diffs)
• lib/elementor/widgets/icon-box/icon-box.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)

envo-extra/trunk/envo-extra.php

@@ -4 +4 @@
  * Plugin URI: https://envothemes.com/
  * Description: Extra addon for EnvoThemes Themes
- * Version: 1.9.11
+ * Version: 1.9.12
  * Author: EnvoThemes
  * Author URI: https://envothemes.com/

envo-extra/trunk/lib/elementor/widgets/counter/counter.php

@@ -755 +755 @@
         $attr .= $settings[ 'link' ][ 'is_external' ] ? ' target="_blank"' : '';
         $attr .= $settings[ 'link' ][ 'nofollow' ] ? ' rel="nofollow"' : '';
+        $allowed_tags = [ 'h1','h2','h3','h4','h5','h6','div','span','p' ];
+        $title_tag = in_array( $settings['title_tag'], $allowed_tags, true ) ? $settings['title_tag'] : 'h3';
         ?>
 
@@ -770 +772 @@
                 <?php
                 if ( $settings[ 'title' ] ) :
-                    printf( '<%1$s %2$s>%3$s</%1$s>', tag_escape( $settings[ 'title_tag' ] ), $this->get_render_attribute_string( 'title' ), $settings[ 'title' ] ); //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+                    printf( '<%1$s %2$s>%3$s</%1$s>', tag_escape( $title_tag ), $this->get_render_attribute_string( 'title' ), $settings[ 'title' ] ); //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
                 endif;
                 if ( $settings[ 'description' ] ) :

envo-extra/trunk/lib/elementor/widgets/icon-box/icon-box.php

@@ -910 +910 @@
         $attr .= $settings[ 'link' ][ 'is_external' ] ? ' target="_blank"' : '';
         $attr .= $settings[ 'link' ][ 'nofollow' ] ? ' rel="nofollow"' : '';
+        $allowed_tags = [ 'h1','h2','h3','h4','h5','h6','div','span','p' ];
+        $title_tag = in_array( $settings['title_tag'], $allowed_tags, true ) ? $settings['title_tag'] : 'h3';
         ?>
 
@@ -934 +936 @@
                 <?php
                 if ( $settings[ 'title' ] ) :
-                    printf( '<%1$s %2$s>%3$s</%1$s>', tag_escape( $settings[ 'title_tag' ] ), $this->get_render_attribute_string( 'title' ), $settings[ 'title' ] ); //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+                    printf( '<%1$s %2$s>%3$s</%1$s>', tag_escape( $title_tag ), $this->get_render_attribute_string( 'title' ), $settings[ 'title' ] ); //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
                 endif;
                 ?>

envo-extra/trunk/readme.txt

@@ -4 +4 @@
 Plugin URL: https://envothemes.com/
 Requires at Least: 4.9
-Tested Up To: 6.8
-Stable tag: 1.9.11
+Tested Up To: 6.9
+Stable tag: 1.9.12
 Requires PHP: 5.6
 License: GPLv2 or later
@@ -31 +31 @@
 
 == Changelog ==
+
+= 1.9.12 =
+* Security update
+* Tested with WP 6.9
+* Tested with WooCommerce 10.4
+* Tested with Elementor 3.33
 
 = 1.9.11 =