WordPress.org
Get WordPress

Plugin Directory

Changeset 3443154


Ignore:
Timestamp:
01/20/2026 10:46:59 AM (4 weeks ago)
Author:
jorgegl
Message:

Version 2.0.1: Full cleanup. Removed Freemius files from repository and fixed security issues.

Location:
smartmetadesc
Files:
5 deleted
2 edited
10 copied

Legend:

Unmodified
Added
Removed

  • smartmetadesc/tags/2.0.1/readme.txt

    r3440950 r3443154  
    44Requires at least: 4.7
    55Tested up to: 6.9
    6 Stable tag: 2.0.0
     6Stable tag: 2.0.1
    77License: GPLv2 or later
    88License URI: https://www.gnu.org/licenses/gpl-2.0.html
    … …  
    5151== Changelog ==
    5252
     53= 2.0.1 =
     54* Fixed sanitization and escaping issues (Security hardening).
     55* Removed discouraged load_plugin_textdomain() call.
     56* Improved REST API and AJAX nonce verification.
     57
    5358= 2.0.0 =
    5459* Major Release: Complete code refactor.

  • smartmetadesc/tags/2.0.1/smartmetadesc.php

    r3440940 r3443154  
    33Plugin Name: Smart Meta Desc
    44Description: Show a list of posts without a meta description and allow writing or generating them based on their content using AI.
    5 Version: 2.0.0
     5Version: 2.0.1
    66Author: Mitts For Code
    77Author URI: https://mittsforcode.es
    … …  
    8181
    8282/**
    83  * Carga de traducciones
    84  */
    85 add_action( 'plugins_loaded', 'mittsfcsmd_load_textdomain' );
    86 function mittsfcsmd_load_textdomain() {
    87     load_plugin_textdomain( 'smartmetadesc', false, dirname( plugin_basename( __FILE__ ) ) . '/languages/' );
    88 }
    89 
    90 /**
    9183 * Menú de ajustes
    9284 */
    … …  
    236228        'callback'            => 'mittsfcsmd_save_meta_descripcion',
    237229        'permission_callback' => function () {
    238             $nonce = isset( $_SERVER['HTTP_X_WP_NONCE'] ) ? sanitize_text_field( $_SERVER['HTTP_X_WP_NONCE'] ) : '';
     230            $nonce = isset( $_SERVER['HTTP_X_WP_NONCE'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_X_WP_NONCE'] ) ) : '';
    239231            if ( !wp_verify_nonce( $nonce, 'wp_rest' ) ) {
    240232                return new WP_Error('rest_forbidden', __( 'Nonce invalid.', 'smartmetadesc' ), array('status' => 403));
    … …  
    294286add_action( 'wp_ajax_mittsfcsmd_save_meta_desc', 'mittsfcsmd_save_meta_desc_ajax' );
    295287function mittsfcsmd_save_meta_desc_ajax() {
    296     $nonce = isset($_POST['nonce']) ? sanitize_text_field( $_POST['nonce'] ) : '';
     288    $nonce = isset($_POST['nonce']) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';
    297289    if ( !wp_verify_nonce( $nonce, 'mittsfcsmd_nonce' ) || !current_user_can( 'edit_posts' ) ) {
    298290        wp_send_json_error( __( 'Permission denied.', 'smartmetadesc' ) );

  • smartmetadesc/trunk/readme.txt

    r3440950 r3443154  
    44Requires at least: 4.7
    55Tested up to: 6.9
    6 Stable tag: 2.0.0
     6Stable tag: 2.0.1
    77License: GPLv2 or later
    88License URI: https://www.gnu.org/licenses/gpl-2.0.html
    … …  
    5151== Changelog ==
    5252
     53= 2.0.1 =
     54* Fixed sanitization and escaping issues (Security hardening).
     55* Removed discouraged load_plugin_textdomain() call.
     56* Improved REST API and AJAX nonce verification.
     57
    5358= 2.0.0 =
    5459* Major Release: Complete code refactor.

  • smartmetadesc/trunk/smartmetadesc.php

    r3440940 r3443154  
    33Plugin Name: Smart Meta Desc
    44Description: Show a list of posts without a meta description and allow writing or generating them based on their content using AI.
    5 Version: 2.0.0
     5Version: 2.0.1
    66Author: Mitts For Code
    77Author URI: https://mittsforcode.es
    … …  
    8181
    8282/**
    83  * Carga de traducciones
    84  */
    85 add_action( 'plugins_loaded', 'mittsfcsmd_load_textdomain' );
    86 function mittsfcsmd_load_textdomain() {
    87     load_plugin_textdomain( 'smartmetadesc', false, dirname( plugin_basename( __FILE__ ) ) . '/languages/' );
    88 }
    89 
    90 /**
    9183 * Menú de ajustes
    9284 */
    … …  
    236228        'callback'            => 'mittsfcsmd_save_meta_descripcion',
    237229        'permission_callback' => function () {
    238             $nonce = isset( $_SERVER['HTTP_X_WP_NONCE'] ) ? sanitize_text_field( $_SERVER['HTTP_X_WP_NONCE'] ) : '';
     230            $nonce = isset( $_SERVER['HTTP_X_WP_NONCE'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_X_WP_NONCE'] ) ) : '';
    239231            if ( !wp_verify_nonce( $nonce, 'wp_rest' ) ) {
    240232                return new WP_Error('rest_forbidden', __( 'Nonce invalid.', 'smartmetadesc' ), array('status' => 403));
    … …  
    294286add_action( 'wp_ajax_mittsfcsmd_save_meta_desc', 'mittsfcsmd_save_meta_desc_ajax' );
    295287function mittsfcsmd_save_meta_desc_ajax() {
    296     $nonce = isset($_POST['nonce']) ? sanitize_text_field( $_POST['nonce'] ) : '';
     288    $nonce = isset($_POST['nonce']) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';
    297289    if ( !wp_verify_nonce( $nonce, 'mittsfcsmd_nonce' ) || !current_user_can( 'edit_posts' ) ) {
    298290        wp_send_json_error( __( 'Permission denied.', 'smartmetadesc' ) );
Note: See TracChangeset for help on using the changeset viewer.