Fixes remove_query_arg vulnerability.

woocommerce · Apr 22, 2015 · 6e81d23 · 6e81d23
1 parent 8e21475
commit 6e81d23
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 5 deletions.
diff --git a/classes/class-icons-for-features-admin.php b/classes/class-icons-for-features-admin.php
@@ -60,7 +60,7 @@ public function maybe_process_dismiss_link () {
 
 			$redirect_url = remove_query_arg( 'action', remove_query_arg( 'nonce', $_SERVER['REQUEST_URI'] ) );
 
-			wp_safe_redirect( $redirect_url );
+			wp_safe_redirect( esc_url( $redirect_url ) );
 			exit;
 		}
 	} // End maybe_process_dismiss_link()

diff --git a/icons-for-features.php b/icons-for-features.php
@@ -3,11 +3,11 @@
  * Plugin Name: Icons For Features
  * Plugin URI: http://www.woothemes.com/products/icons-for-features/
  * Description: Hey there! Do you want to display awesome icons for each of your features? Look no further, I'm here to help!
- * Version: 1.0.0
+ * Version: 1.0.1
  * Author: WooThemes
  * Author URI: http://woothemes.com/
  * Requires at least: 3.8.1
- * Tested up to: 3.8.1
+ * Tested up to: 4.1.1
  *
  * Text Domain: icons-for-features
  * Domain Path: /languages/

diff --git a/readme.txt b/readme.txt
@@ -3,8 +3,8 @@ Contributors: woothemes,mattyza
 Donate link: http://woothemes.com/
 Tags: features,icons,font-awesome
 Requires at least: 3.8.1
-Tested up to: 3.8.1
-Stable tag: 1.0.0
+Tested up to: 4.1.1
+Stable tag: 1.0.1
 License: GPLv3 or later
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
 
@@ -58,12 +58,20 @@ We encourage everyone to contribute their ideas, thoughts and code snippets. Thi
 
 == Upgrade Notice ==
 
+= 1.0.1 =
+* 2015-04-22
+* Security Fix for remove_query_arg vulnerability
+
 = 1.0.0 =
 * 2014-03-18
 * Initial release. Woo!
 
 == Changelog ==
 
+= 1.0.1 =
+* 2015-04-22
+* Fix for remove_query_arg vulnerability
+
 = 1.0.0 =
 * 2014-03-18
 * Initial release. Woo!