WordPress.org
Get WordPress

Plugin Directory

Changeset 3126398


Ignore:
Timestamp:
07/27/2024 05:06:34 AM (20 months ago)
Author:
jamesdlow
Message:

1.3.9

  • Escape nounces in SettingsLib
Location:
pageapp
Files:
18 added
3 edited

Legend:

Unmodified
Added
Removed

  • pageapp/trunk/inc/settingslib.php

    r3107422 r3126398  
    7474    public static function check_nounce($key) {
    7575        if (isset($_POST[$key])) {
    76             if (wp_verify_nonce($_POST[$key], plugin_basename( __FILE__ ))) {
     76            if (wp_verify_nonce(sanitize_key(wp_unslash($_POST[$key])), plugin_basename( __FILE__ ))) {
    7777                return true;
    7878            } else {

  • pageapp/trunk/pageapp.php

    r3107422 r3126398  
    44Plugin URI: https://wordpress.org/plugins/pageapp/
    55Description: Extensions to Wordpress wp-json for the PageApp API and mobile framework
    6 Version: 1.3.8
     6Version: 1.3.9
    77Author: PageApp
    88Author URI: https://www.pageapp.com

  • pageapp/trunk/readme.txt

    r3107422 r3126398  
    44Requires at least: 3.0
    55Tested up to: 6.5.4
    6 Stable tag: 1.3.8
     6Stable tag: 1.3.9
    77License: © 2024 Thireen32 Pty Ltd
    88Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=K6VKWB3HZB2T2&item_name=Donation%20to%20jameslow%2ecom&currency_code=USD&bn=PP%2dDonationsBF&charset=UTF%2d8
    … …  
    2828
    2929== Changelog ==
     30
     31= 1.3.9 =
     32* Escape nounces in SettingsLib
    3033
    3134= 1.3.8 =
Note: See TracChangeset for help on using the changeset viewer.