WordPress.org
Get WordPress

Plugin Directory

Changeset 3238628


Ignore:
Timestamp:
02/11/2025 02:25:01 PM (13 months ago)
Author:
crazypsycho
Message:

fix a vulnerability

Location:
dynamicconditions
Files:
65 added
3 edited

Legend:

Unmodified
Added
Removed

  • dynamicconditions/trunk/Public/DynamicConditionsPublic.php

    r3134302 r3238628  
    349349            $section->after_render();
    350350        } else if ( $type == 'column' && $settings['dynamicconditions_resizeOtherColumns'] ) {
    351             echo '<div class="dc-hidden-column" data-size="' . $settings['_column_size'] . '"></div>';
     351            echo '<div class="dc-hidden-column" data-size="' . floatval( $settings['_column_size'] ) . '"></div>';
    352352        }
    353353
    354354        if ( !empty( $settings['dynamicconditions_hideWrapper'] ) ) {
    355             echo '<div class="dc-hide-wrapper" data-selector="' . $settings['dynamicconditions_hideWrapper'] . '"></div>';
     355            echo '<div class="dc-hide-wrapper" data-selector="' . esc_attr($settings['dynamicconditions_hideWrapper']) . '"></div>';
    356356        }
    357357
    358358        if ( !empty( $settings['dynamicconditions_hideOthers'] ) ) {
    359             echo '<div class="dc-hide-others" data-selector="' . $settings['dynamicconditions_hideOthers'] . '"></div>';
     359            echo '<div class="dc-hide-others" data-selector="' . esc_attr($settings['dynamicconditions_hideOthers']) . '"></div>';
    360360        }
    361361

  • dynamicconditions/trunk/README.txt

    r3134296 r3238628  
    55Requires at least: 5.0
    66Requires PHP: 7.4
    7 Tested up to: 6.6
    8 Stable tag: 1.7.4
     7Tested up to: 6.7
     8Stable tag: 1.7.5
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    6666
    6767== Changelog ==
     68= 1.7.5 =
     69* Fix a potential vulnerability
     70
    6871= 1.7.4 =
    6972* Fix big issue with loops destroying everything

  • dynamicconditions/trunk/dynamic-conditions.php

    r3134296 r3238628  
    2323 * Plugin URI:        https://github.com/RTO-Websites/dynamic-conditions
    2424 * Description:       Activates conditions for dynamic tags to show/hides a widget.
    25  * Version:           1.7.4
     25 * Version:           1.7.5
    2626 * Author:            RTO GmbH
    2727 * Author URI:        https://www.rto.de
    … …  
    3737}
    3838
    39 define( 'DynamicConditions_VERSION', '1.7.4' );
     39define( 'DynamicConditions_VERSION', '1.7.5' );
    4040
    4141define( 'DynamicConditions_DIR', str_replace( '\\', '/', __DIR__ ) );
Note: See TracChangeset for help on using the changeset viewer.