Plugin Directory

Changeset 3225538


Ignore:
Timestamp:
01/20/2025 11:50:34 AM (15 months ago)
Author:
listamester
Message:

security fix

Location:
listamester/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • listamester/trunk/includes/class-listamester.php

    r3068202 r3225538  
    170170    private function normalizeSizeValue($x) {
    171171        if (!$x) return '';
    172         $lastChar = substr($x, -1);
    173         if (is_numeric($lastChar)) return $x . 'px';
    174         return $x;
     172        if (is_numeric($x)) return $x . 'px';
     173        $suffices = array('em', 'ex', '%', 'px', 'cm', 'mm', 'in', 'pt', 'pc', 'ch', 'rem', 'vh', 'vw', 'vmin', 'vmax');
     174        foreach ($suffices as $suffix) {
     175            $p = strrpos($x, $suffix);
     176            if ( $p == strlen($x) - strlen($suffix)) {
     177                $v = substr($x, 0, $p);
     178                if (is_numeric($v)) {
     179                    return $x;
     180                } else {
     181                    return '';
     182                }
     183            }
     184        }
     185        return '';
    175186    }
    176187
  • listamester/trunk/listamester.php

    r3068202 r3225538  
    33 * Plugin Name: Listamester
    44 * Description: Hírlevélküldő, email marketing szolgáltatás WordPress-hez
    5  * Version: 2.3.4
     5 * Version: 2.3.5
    66 * Author: Listamester
    77 * Author URI: https://listamester.hu
  • listamester/trunk/readme.txt

    r3068202 r3225538  
    33Tags: e-mail marketing, newsletter
    44Requires at least: 4.0.1
    5 Tested up to: 6.5.2
     5Tested up to: 6.7.1
    66Requires PHP: 7.4.0
    7 Stable tag: 2.3.4
     7Stable tag: 2.3.5
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
Note: See TracChangeset for help on using the changeset viewer.