Plugin Directory

Changeset 3150555


Ignore:
Timestamp:
09/12/2024 07:27:34 AM (19 months ago)
Author:
jamesdlow
Message:

1.5.1

  • Additional fix to vulnerability in editor
  • Remove PHP 8.X warning
Location:
css-js-files
Files:
7 added
2 edited

Legend:

Unmodified
Added
Removed
  • css-js-files/trunk/css-js-files.php

    r3146818 r3150555  
    44Plugin URI: https://wordpress.org/plugins/css-js-files/
    55Description: Add CSS files and/or CSS custom rules to any single page or post or globally
    6 Version: 1.5.0
     6Version: 1.5.1
    77Author: James Low
    88Author URI: http://jameslow.com
     
    120120    }
    121121    public static function editor_page() {
    122         $file = sanitize_text_field($_GET['file']);
    123         $hasfile = isset($file) && $file != '' && str_starts_with($file, get_option('css_js_files_path') && strpos($file, '..') === false);
     122        $file = isset($_GET['file']) ? sanitize_text_field($_GET['file']) : '';
     123        $hasfile = $file != '' && str_starts_with($file, get_option('css_js_files_path')) && strpos($file, '..') === false;
    124124        $path = $hasfile ? WP_CONTENT_DIR.'/'.$file : '';
    125125        if (!current_user_can( 'manage_options' ))  {
  • css-js-files/trunk/readme.txt

    r3146818 r3150555  
    55Requires at least: 3.0
    66Tested up to: 6.5.5
    7 Stable tag: 1.5.0
     7Stable tag: 1.5.1
    88License: MIT Licens
    99License URI: https://opensource.org/licenses/MIT
     
    2929
    3030== Changelog ==
     31
     32= 1.5.1 =
     33* Additional fix to vulnerability in editor
     34* Remove PHP 8.X warning
    3135
    3236= 1.5.0 =
Note: See TracChangeset for help on using the changeset viewer.