Skip to content

v6.7.1

Choose a tag to compare

@Crabcyborg Crabcyborg released this 03 Jan 20:10
· 9770 commits to master since this release
c834061
  • Security: Form input from unprivileged users will now be sanitized more with strict rules and filtered more on display, allowing only a few basic HTML tags (p, i, b, strong and br) with no support for attributes. The allowed tags can be modified using a new frm_allowed_form_input_html filter.
  • Security: Additional sanitizing has been added when making live form builder updates to avoid malicious changes from privileged users.
  • New: Formidable branding has been removed on the import page when white labelling is enabled.
  • New: The permission to view forms has been renamed to "View Forms List" to remove ambiguity.
  • Fix: A failed to open stream warning would get logged when calling include(modal.php) on some admin pages.
  • Fix: A styling issue has been fixed with checkboxes in the screen options panel for responsive mobile widths.
  • Fix: A redirect will now happen after emptying form trash to avoid emptying form trash again when refreshing the page.
  • Fix: Fewer requests will now be made at once when checking for license status in add ons.
  • Fix: Repeater forms are no longer included in the deleted form count when emptying form trash.
  • Fix: A cannot read properties of null JavaScript TypeError would get logged when switching between Product field types.
  • Fix: A passing null to parameter #3 deprecated warning would get logged when previewing a form in-theme.
  • Fix: File theme without header.php and footer.php deprecated messages were getting logged when previewing in-theme using the Twenty Twenty Three theme.
  • Fix: A payments table does not exist database error would get logged when creating email summaries for sites without payments configured.
  • Fix: Required credit card fields were failing validation when using for Stripe actions included with this plugin.