You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Security: Imported choice values are now sanitized with sanitize_text_field instead of wp_kses('post'), closing an XSS surface on crafted CSV/XLSX payloads
Security: Removed the contradictory LIBXML_NOENT flag from the XLSX parser so XXE protection is no longer weakened on PHP 8.0+
Fixed: Error messages during file upload now use the plugin's own text domain instead of gravityforms, so translations are picked up correctly
Fixed: The fieldSettings.chainedselect editor registration no longer accumulates duplicate entries on repeated editor opens
Improved: Admin CSS and JS are now loaded only on Gravity Forms screens instead of every admin page
Improved: The inline footer CSS for hidden columns and full-width fields is now deduplicated into a single <style> block regardless of how many forms are rendered
Improved: Unique-value limit checks during import now use O(1) lookups instead of O(n) scans