WordPress.org
Get WordPress

Plugin Directory

Changeset 3389644


Ignore:
Timestamp:
11/04/2025 12:16:36 PM (5 months ago)
Author:
sheetdb
Message:

updated escape rules in readme

Location:
sheetdb/trunk
Files:
1 added
1 deleted
2 edited

Legend:

Unmodified
Added
Removed

  • sheetdb/trunk/readme.txt

    r3389153 r3389644  
    66Tested up to: 6.9.0
    77Requires PHP: 5.4
    8 Stable tag: 1.3.5
     8Stable tag: 1.3.6
    99License: GPLv2 or later
    1010
    … …  
    3030* sort-order - sort in `asc` or `desc` order
    3131* lazy-loading - If you set this attribute to true, the api call will be executed only when the user reaches the point of the table. If your table is lower on the page this can help reduce request consumption.
     32
     33HTML rendering and safety:
     34* Using `{{name}}` renders plain text only. Any HTML is escaped and will not be executed or rendered.
     35* Using `{{html:name}}` allows most safe HTML tags to render (e.g. `a`, `p`, `ul`, `li`, `strong`, `em`, `img` with safe attributes). Potentially dangerous tags and attributes (e.g. `<script>`, `<iframe>`, `<object>`, `<embed>`, inline `on*` event handlers, and `javascript:` URLs) are stripped/sanitized.
     36
     37This behavior is intentional for security reasons to prevent XSS and code injection from spreadsheet content.
     38
     39Security recommendation:
     40* For best security, configure your SheetDB API as read-only: enable only `GET` and disable `POST`, `PATCH`, and `DELETE`. This prevents anyone from modifying your data via exposed API keys or URLs.
    3241
    3342Additional information:

  • sheetdb/trunk/sheetdb.php

    r3389153 r3389644  
    77Plugin name: SheetDB
    88Description: The SheetDB wordpress plugin allows you to easily add content from Google Spreadsheet to your wordpress site.
    9 Version: 1.3.5
     9Version: 1.3.6
    1010Author: SheetDB
    1111Author URI: https://sheetdb.io/
    … …  
    4646        public function enqueueAssets()
    4747        {
    48             wp_enqueue_script('sheetdb-js', plugins_url('assets/js/sheetdb-handlebars-1.2.5.js', __FILE__));
     48            wp_enqueue_script('sheetdb-js', plugins_url('assets/js/sheetdb-handlebars-1.2.6.js', __FILE__));
    4949        }
    5050
Note: See TracChangeset for help on using the changeset viewer.