Changeset 3418126
- Timestamp:
- 12/12/2025 10:32:46 AM (3 months ago)
- Location:
- atarim-visual-collaboration
- Files:
-
- 9 added
- 6 deleted
- 3 edited
-
assets/screenshot-1.gif (added)
-
assets/screenshot-1.png (deleted)
-
assets/screenshot-10.png (added)
-
assets/screenshot-2.gif (added)
-
assets/screenshot-2.png (deleted)
-
assets/screenshot-3.png (modified) (previous)
-
assets/screenshot-4.gif (added)
-
assets/screenshot-4.png (deleted)
-
assets/screenshot-5.gif (added)
-
assets/screenshot-5.png (deleted)
-
assets/screenshot-6.gif (added)
-
assets/screenshot-6.png (deleted)
-
assets/screenshot-7.gif (added)
-
assets/screenshot-7.png (deleted)
-
assets/screenshot-8.gif (added)
-
assets/screenshot-9.gif (added)
-
tags/4.3/readme.txt (modified) (1 diff)
-
trunk/readme.txt (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
atarim-visual-collaboration/tags/4.3/readme.txt
r3418099 r3418126 233 233 8. **Sharing with others** 234 234 9. **Talking with the AI** 235 10. **Team and Clients Collabora ion & Feedback**235 10. **Team and Clients Collaboration & Feedback** 236 236 237 237 238 238 == Changelog == 239 = 4.3 = 240 * **Introduced new version** 241 242 = 4.2.2 = 243 * **Security Fixes & Hardening** 244 - Improved authorization and request validation in the license activation flow. 245 - Enhanced access controls for internal REST API endpoints. 246 - Strengthened validation and handling of media-related requests. 247 - Improved user-related request validation to prevent exposure of sensitive information. 248 - Hardened token authentication flow in coordination with the Atarim platform. 249 250 = 4.2.1 = 251 * **Heads up** - This version is preparing the plugin for a major release on the next version: bringing deep AI collaboration to the plugin and fixing security concerns. 252 253 = 4.2 = 254 * **ESC key conflict** – Fixed an issue where toggling between browse and comment modes using the ESC key caused the collaboration bar to not appear. 255 * **Legacy jQuery override** – Resolved a conflict where older jQuery versions (below 2.0) loaded by some themes caused AJAX POST requests to degrade to GET, breaking functionality. 256 257 = 4.1.3 = 258 * **jQuery conflict** - Our jQuery UI library had conflict with WordPress's default sortable UI jQuery. This is fixed. 259 * **Task center** - Issue creating General task from plugin's Task center. This is fixed. 260 261 = 4.1.2 = 262 * **XSS vulnerability** - A Cross-Site Scripting (XSS) vulnerability was identified in our plugin, this is now fixed. 263 264 = 4.1.1 = 265 * **Auto Screenshot** - On some sites, the auto screenshot were not getting captured due to delay in the process. This is fixed. 266 267 = 4.1.0 = 268 * **Guest mode** - Disabled guest mode by default when plugin is installed. 269 * **Added security** - Secured ajax call by adding nonce to secure them from CSRF. 270 271 = 4.0.9 = 272 * **Arbitrary Content Deletion Vulnerability** - Fixed a critical issue that allowed unauthenticated users to delete files or pages via arbitrary requests when Guest mode was activated by default. 273 * **Stored XSS Vulnerability** - Fixed a stored Cross-Site Scripting vulnerability that allowed malicious actors to inject harmful scripts when Guest mode was enabled, affecting collaboration features on pages. 274 239 275 = 4.0.8 = 240 276 * **Security Update** - Updated Lottie library version from @latest to a fixed 2.0.8 version to ensure a stable and secure experience. -
atarim-visual-collaboration/trunk/readme.txt
r3418099 r3418126 233 233 8. **Sharing with others** 234 234 9. **Talking with the AI** 235 10. **Team and Clients Collabora ion & Feedback**235 10. **Team and Clients Collaboration & Feedback** 236 236 237 237 238 238 == Changelog == 239 = 4.3 = 240 * **Introduced new version** 241 242 = 4.2.2 = 243 * **Security Fixes & Hardening** 244 - Improved authorization and request validation in the license activation flow. 245 - Enhanced access controls for internal REST API endpoints. 246 - Strengthened validation and handling of media-related requests. 247 - Improved user-related request validation to prevent exposure of sensitive information. 248 - Hardened token authentication flow in coordination with the Atarim platform. 249 250 = 4.2.1 = 251 * **Heads up** - This version is preparing the plugin for a major release on the next version: bringing deep AI collaboration to the plugin and fixing security concerns. 252 253 = 4.2 = 254 * **ESC key conflict** – Fixed an issue where toggling between browse and comment modes using the ESC key caused the collaboration bar to not appear. 255 * **Legacy jQuery override** – Resolved a conflict where older jQuery versions (below 2.0) loaded by some themes caused AJAX POST requests to degrade to GET, breaking functionality. 256 257 = 4.1.3 = 258 * **jQuery conflict** - Our jQuery UI library had conflict with WordPress's default sortable UI jQuery. This is fixed. 259 * **Task center** - Issue creating General task from plugin's Task center. This is fixed. 260 261 = 4.1.2 = 262 * **XSS vulnerability** - A Cross-Site Scripting (XSS) vulnerability was identified in our plugin, this is now fixed. 263 264 = 4.1.1 = 265 * **Auto Screenshot** - On some sites, the auto screenshot were not getting captured due to delay in the process. This is fixed. 266 267 = 4.1.0 = 268 * **Guest mode** - Disabled guest mode by default when plugin is installed. 269 * **Added security** - Secured ajax call by adding nonce to secure them from CSRF. 270 271 = 4.0.9 = 272 * **Arbitrary Content Deletion Vulnerability** - Fixed a critical issue that allowed unauthenticated users to delete files or pages via arbitrary requests when Guest mode was activated by default. 273 * **Stored XSS Vulnerability** - Fixed a stored Cross-Site Scripting vulnerability that allowed malicious actors to inject harmful scripts when Guest mode was enabled, affecting collaboration features on pages. 274 239 275 = 4.0.8 = 240 276 * **Security Update** - Updated Lottie library version from @latest to a fixed 2.0.8 version to ensure a stable and secure experience.
Note: See TracChangeset
for help on using the changeset viewer.