Skip to content

4.4.6.2

Choose a tag to compare

View all tags
@warfare-plugins warfare-plugins released this 03 Apr 20:14
· 71 commits to master since this release
4.4.6.2
2850162
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

= 4.4.6.2 (3 Apr 2024) =

  • Implemented stricter attribute sanitization in SWP_Buttons_Panel_Shortcode class to enhance security and mitigate the risk of cross-site scripting (XSS) attacks through shortcode attributes. This update introduces a more rigorous sanitization process for all attributes passed through the shortcode handling mechanism. The sanitize_attributes method now applies basic sanitization using sanitize_text_field, followed by a secondary sanitization step using a regex pattern to remove any remaining special characters that could be used in malicious injections.
    • Enhanced sanitize_attributes method in SWP_Buttons_Panel_Shortcode class
    • Added regex pattern to remove special characters from attribute values after initial sanitization
Assets 2
Loading