Skip to content

2.3.1

Latest
Latest

Choose a tag to compare

View all tags
@codebard codebard released this 26 Sep 18:30
2.3.1
637f320
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

= 2.3.1 =

  • Security: Sanitized $_REQUEST data with map_deep() before dispatching to action handlers
  • Security: Escaped all remaining unescaped variable and option outputs across admin pages
  • Security: Escaped nonce, internal ID, and admin URL outputs in setup and settings templates
  • Security: Added wp_kses_post() escaping to language selector, addon display, and notice outputs
  • Security: Used targeted wp_kses() allowlist for form/page template output to preserve form structure
  • Fix: Setup modal no longer renders raw PHP code from $site_account assignment outside PHP tags
  • Fix: Settings save restored after wp_kses_post() mangled form HTML in page templates
Assets 2
Loading