WordPress.org
Get WordPress

Plugin Directory

Changeset 3445671


Ignore:
Timestamp:
01/23/2026 03:38:56 PM (6 weeks ago)
Author:
freemp
Message:

Sanitized input field contents.

Location:
javascript-notifier/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • javascript-notifier/trunk/javascript-notifier.php

    r3125777 r3445671  
    44 * Plugin URI: https://wordpress.org/plugins/javascript-notifier
    55 * Description: Notify visitors of your website if 1st-party JavaScript is disabled. Block entire site, if required.
    6  * Version: 1.2.8
     6 * Version: 1.2.9
    77 * Author: freemp
    88 * Author URI: https://profiles.wordpress.org/freemp
    … …  
    1414if ( ! defined( 'ABSPATH' ) ) exit;
    1515
    16 define( 'JAVASCRIPT_NOTIFIER_VERSION', '1.2.8' );
     16define( 'JAVASCRIPT_NOTIFIER_VERSION', '1.2.9' );
    1717
    1818if ( is_admin() ) {
    … …  
    7373        $settings = get_option( 'javascript_notifier_settings' );
    7474        $block = $settings['block'] ?? '';
    75         $style = 'style="background-color:' . $settings['bg_color'] . ';color:' . $settings['fg_color'] . ';font-size:' . $settings['font_size'] . '%;opacity:' . $settings['opacity'] . ';' . $settings['custom_css'] . '"';
     75        $style = 'style="background-color:' . sanitize_hex_color( $settings['bg_color'] ) . ';color:' . sanitize_hex_color( $settings['fg_color'] ) . ';font-size:' . $settings['font_size'] . '%;opacity:' . $settings['opacity'] . ';' . sanitize_text_field( $settings['custom_css'] ) . '"';
    7676?>
    7777<!-- JavaScript Notifier -->
    78 <?php if( $block ) : ?><div class="javascript_notifier" id="javascript_notifier_block" <?php echo $style; ?>><div id="javascript_notifier_block_2"><div id="javascript_notifier_block_3"><?php else : ?><div class="javascript_notifier" id="javascript_notifier_bar" <?php echo $style; ?>><?php endif; ?><strong><?php echo $settings['message']; ?></strong></div><?php if( $block ) : ?></div></div><?php endif; ?>
     78<?php if( $block ) : ?><div class="javascript_notifier" id="javascript_notifier_block" <?php echo $style; ?>><div id="javascript_notifier_block_2"><div id="javascript_notifier_block_3"><?php else : ?><div class="javascript_notifier" id="javascript_notifier_bar" <?php echo $style; ?>><?php endif; ?><strong><?php echo sanitize_text_field( $settings['message'] ); ?></strong></div><?php if( $block ) : ?></div></div><?php endif; ?>
    7979<script id="hide-javascript-notifier-js" type="application/javascript">
    8080document.getElementById('javascript_notifier_<?php echo( $block ? 'block' : 'bar' ); ?>').style.setProperty('display', 'none', 'important');

  • javascript-notifier/trunk/readme.txt

    r3408989 r3445671  
    4343
    4444== Changelog ==
     45
     46= 1.2.9 =
     47* Sanitized input field contents.
    4548
    4649= 1.2.8 =
    … …  
    9396== Upgrade Notice ==
    9497
     98= 1.2.9 =
     99* Sanitized input field contents.  Upgrade immediately.
     100
    95101= 1.2.2 =
    96102* Fixes broken WPML translations configuration.  Upgrade required for multilingual sites.
Note: See TracChangeset for help on using the changeset viewer.