Skip to content

v2.13.3

Choose a tag to compare

View all tags
@jtsternberg jtsternberg released this 03 Oct 19:03
· 48 commits to master since this release
v2.13.3
This tag was signed with the committer’s verified signature.
jtsternberg Justin Sternberg
SSH Key Fingerprint: RC8Ex3spb1wpqMQNou0CjyoiHAFQu15l5OY7l1IpFf0
Verified
Learn about vigilant mode.
0f24984
This commit was signed with the committer’s verified signature.
jtsternberg Justin Sternberg
SSH Key Fingerprint: RC8Ex3spb1wpqMQNou0CjyoiHAFQu15l5OY7l1IpFf0
Verified
Learn about vigilant mode.

Bug Fixes

  • The CMB2 REST boxes/fields endpoints now validate the object_type and object_id parameters against the box's registered object types. A request naming an object type the box is not registered for (a post-type box stores as post), or, for an options-page box, an option key other than the box's own, returns a 400 error instead of reading or writing that object. Stored data is unchanged. Props Avinash Hanwate (@ahanwate) (via GitHub security advisory).
Assets 3
Loading