WordPress.org
Get WordPress

Plugin Directory

Changeset 2995091


Ignore:
Timestamp:
11/13/2023 11:09:54 AM (2 years ago)
Author:
plerdy
Message:

Updating plugin to 1.3.5 with settings security fix

Location:
plerdy-heatmap/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • plerdy-heatmap/trunk/plerdy_heatmap_tracking.php

    r2989934 r2995091  
    44Plugin URI: https://www.plerdy.com
    55Description: The easiest way to add the Plerdy tracking script to your WordPress site!
    6 Version: 1.3.3
     6Version: 1.3.5
    77Author: Plerdy
    88Author URI: https://www.plerdy.com
    … …  
    2525        Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    2626*/
     27
    2728
    2829class Plerdy {
    … …  
    4748    public function delete_option($order_id) {
    4849        delete_option('plerdy_tracking_script');
    49     delete_option('plerdy_abtracking_script');
     50        delete_option('plerdy_abtracking_script');
    5051    }
    5152
    … …  
    6566
    6667    }
    67    
     68
    6869    public function add_abtracking_script() {
    69         echo get_option('plerdy_abtracking_script');
    70         }
     70        echo get_option('plerdy_abtracking_script');
     71    }
    7172
    7273    public function admin_menu_page() {
    … …  
    9394            "\s*<script type=\"text\/javascript\" defer data-plerdy_code='1'>\s*" .
    9495            "var _protocol=\"https:\"==document\.location\.protocol\?\" https:\/\/\":\" http:\/\/\";\s*" .
    95             "_site_hash_code = \"([a-f0-9]{32})\",_suid=(\d+),\s*" .
     96            "_site_hash_code = \"([^\"]*)\",_suid=([^;\s<>]*),\s*" .
    9697            "plerdyScript=document\.createElement\(\"script\"\);\s*" .
    9798            "plerdyScript\.setAttribute\(\"defer\",\"\"\),plerdyScript\.dataset\.plerdymainscript=\"plerdymainscript\",\s*" .
    98             "plerdyScript\.src=\"https:\/\/test\.plerdy\.com\/public\/js\/click\/main\.js\?v=\"\+Math\.random\(\);\s*" .
     99            "plerdyScript\.src=\"https:\/\/[a-z]\.plerdy\.com\/public\/js\/click\/main\.js\?v=\"\+Math\.random\(\);\s*" .
    99100            "var plerdymainscript=document\.querySelector\(\"\\[data-plerdymainscript='plerdymainscript'\\]\"\);\s*" .
    100101            "plerdymainscript&&plerdymainscript\.parentNode\.removeChild\(plerdymainscript\);\s*" .
    … …  
    106107
    107108
    108         if (preg_match($pattern, $input)) {
     109        if (preg_match($pattern, $input) || empty($input)) {
    109110            return $input;
    110111        } else {
    … …  
    118119        // regular expression for validation
    119120
    120         $pattern = "/^" .
    121             preg_quote("<!-- BEGIN PLERDY A/B TESTING CODE -->", '/') .
    122             "<script type=\"text\/javascript\">" .
    123             "_suid=(\d+);" .
    124             "<\/script>" .
    125             "<script async type=\"text\/javascript\" src=\"https://test.plerdy.com/public/js/click/plerdy_ab-min.js?v=" .
    126         "([a-zA-Z0-9]+)\"" . ">".
    127         "<\/script>" .
    128         preg_quote("<!-- END PLERDY A/B TESTING CODE -->", '/') .
    129         "$/";
     121        $pattern = "/<!-- BEGIN PLERDY A\/B TESTING CODE -->\s*" .
     122            "<script type=\"text\/javascript\">\s*" .
     123            "var _suid=(\d+);\s*" .
     124            "<\/script>\s*" .
     125            "<script\s+async\s+type=\"text\/javascript\"\s+src=\"https:\/\/[a-zA-Z0-9.\/:_-]+\/plerdy_ab-min\.js\?v=([^\"\s]+)\"[^>]*>\s*" .
     126            "<\/script>\s*" .
     127            "<!-- END PLERDY A\/B TESTING CODE -->\s*$/i";
    130128
    131     if (preg_match($pattern, $input)) {
    132129
    133         return $input;
     130        if (preg_match($pattern, $input) || empty($input)) {
     131
     132            return $input;
    134133        } else {
    135134            // If validation fails, return the default value

  • plerdy-heatmap/trunk/readme.txt

    r2989840 r2995091  
    44Requires at least: 1.0
    55Tested up to: 6.3
    6 Stable Tag: 1.3.3
     6Stable Tag: 1.3.5
    77License: GPLv2
    88License URI: https://www.gnu.org/licenses/gpl-2.0.html
Note: See TracChangeset for help on using the changeset viewer.