WordPress.org
Get WordPress

Plugin Directory

Changeset 3468600


Ignore:
Timestamp:
02/24/2026 11:47:24 AM (5 weeks ago)
Author:
recognyze
Message:

Fixed: recognyze.txt no longer HTML-escapes the content name.

Location:
recognyze-client
Files:
1 added
3 edited

Legend:

Unmodified
Added
Removed

  • recognyze-client/trunk/includes/utilities.php

    r3464425 r3468600  
    13831383    $page_param = isset( $_GET['page'] ) ? sanitize_text_field( wp_unslash( $_GET['page'] ) ) : '';
    13841384    if ( 'recognyze.txt' === $page_param ) {
    1385         // Prevent any output before headers.
    1386         if ( ob_get_level() ) {
    1387             ob_clean();
    1388         }
    1389 
    1390         header( 'Content-Type: text/plain' );
    1391         header( 'X-Robots-Tag: noindex' );
    1392         header( 'Cache-Control: no-cache, must-revalidate' );
    1393 
    1394         // Generate and serve the content.
    1395         $content = wprc_generate_recognyze_file_content();
    1396         echo $content ? esc_html( $content ) : '';  // Show empty content if no data.
     1385        wprc_serve_recognyze_txt_content();
    13971386        exit;
    13981387    }
    … …  
    14621451    header( 'Cache-Control: no-cache, must-revalidate' );
    14631452
    1464     // Generate and serve the content.
     1453    // Generate and serve the content. Do not HTML-escape: recognyze.txt is plain text.
    14651454    $content = wprc_generate_recognyze_file_content();
    1466     echo $content ? esc_html( $content ) : '';  // Show empty content if no data.
     1455    // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Plain text file; esc_html would corrupt quotes in name= values.
     1456    echo $content ? $content : '';
    14671457}
    14681458

  • recognyze-client/trunk/readme.txt

    r3464425 r3468600  
    44Requires at least: 5.0
    55Tested up to: 6.9
    6 Stable tag: 1.3.47
     6Stable tag: 1.3.48
    77Requires PHP: 7.0
    88License: GPLv2 or later
    … …  
    134134
    135135== Changelog ==
     136
     137= 1.3.48 =
     138* Fix: recognyze.txt no longer HTML-escapes the content name. The name value was incorrectly passed through esc_html() when serving the recognyze.txt file, causing double quotes to appear as " in the output. Serving now outputs plain text only; download and URL-served recognyze.txt both show correct name="..." values.
    136139
    137140= 1.3.47 =
    … …  
    233236== Upgrade Notice ==
    234237
     238= 1.3.48 =
     239Fix: recognyze.txt now shows content names with correct quotes (no more "). Recommended if you use or verify recognyze.txt.
     240
    235241= 1.3.47 =
    236242WordPress.org compliance: Callback escaping, input sanitization for debug logging, and escape-late for echoed variables. Recommended for all users.

  • recognyze-client/trunk/recognyze-client.php

    r3464425 r3468600  
    44 * Plugin URI: https://www.recognyze.ai/publishers/wordpress/
    55 * Description: Dashboard for managing posts and submitting them to an external API. Your content powers AI – earn from it. Register your site, track AI usage and set your fee.
    6  * Version: 1.3.47
     6 * Version: 1.3.48
    77 * Author: Recognyze.AI
    88 * Author URI: https://recognyze.ai
    … …  
    2424
    2525// Plugin constants.
    26 define( 'WPRC_VERSION', '1.3.47' ); // Plugin version check it is the same as above.
     26define( 'WPRC_VERSION', '1.3.48' ); // Plugin version check it is the same as above.
    2727define( 'WPRC_PLUGIN_DIR', plugin_dir_path( __FILE__ ) ); // Plugin directory path.
    2828define( 'WPRC_PLUGIN_URL', plugin_dir_url( __FILE__ ) ); // Plugin URL.
Note: See TracChangeset for help on using the changeset viewer.