WordPress.org
Get WordPress

Plugin Directory

Changeset 3482595


Ignore:
Timestamp:
03/14/2026 03:08:41 PM (3 weeks ago)
Author:
futtta
Message:

next minor LYTE release

Location:
wp-youtube-lyte
Files:
2 edited
9 copied

Legend:

Unmodified
Added
Removed

  • wp-youtube-lyte/tags/1.7.30/readme.txt

    r3395377 r3482595  
    66License URI: [https://www.gnu.org/licenses/gpl-3.0.html](https://www.gnu.org/licenses/gpl-3.0.html)
    77Requires at least: 6.0
    8 Tested up to: 6.9
    9 Stable tag: 1.7.29
     8Tested up to: 7.0
     9Stable tag: 1.7.30
    1010
    1111High performance YouTube video, playlist and audio-only embeds which don't slow down your blog and offer optimal accessibility.
    … …  
    145145
    146146== Changelog ==
     147
     148= 1.7.30 =
     149* avoid error logging when both description and title are not set
     150* improve shortcode output sanitization to prevent possible Authenticated Stored Cross-Site Scripting as reported by Muhammad Yudha
     151* tested with WordPress 7.0 (beta)
    147152
    148153= 1.7.29 =

  • wp-youtube-lyte/tags/1.7.30/wp-youtube-lyte.php

    r3395377 r3482595  
    55Description: Lite and accessible YouTube audio and video embedding.
    66Author: Frank Goossens (futtta)
    7 Version: 1.7.29
     7Version: 1.7.30
    88Author URI: http://blog.futtta.be/
    99Text Domain: wp-youtube-lyte
    … …  
    1515
    1616$debug           = false;
    17 $lyte_version    = '1.7.29';
     17$lyte_version    = '1.7.30';
    1818$lyte_db_version = get_option( 'lyte_version', 'none' );
    1919
    … …  
    533533
    534534                // try to ensure description is never empty to avoid Google structured data test tool complaining about it missing.
    535                 if ( ! array_key_exists( 'description', $_thisLyte ) || empty( $_thisLyte['description'] ) ) {
     535                if ( array_key_exists( 'title', $_thisLyte ) && ( ! array_key_exists( 'description', $_thisLyte ) || empty( $_thisLyte['description'] ) ) ) {
    536536                    $_thisLyte['description'] = $_thisLyte['title'];
    537537                }
    … …  
    658658
    659659    if ($audio) { $proto = 'httpa'; } else { $proto = 'httpv'; }
    660     if ( $start !== '' ) { $qs .= '&start=' . $start; }
     660    if ( $start !== '' ) { $qs .= '&start=' . esc_attr( $start ); }
    661661    if ( $showinfo === 'false' ) { $qs .= '&showinfo=0'; }
    662662    if ( $hqthumb ) { $qs .= '&hqThumb=1'; }
    663     if ( $stepsize ) { $qs .= '#stepSize=' . $stepsize; }
     663    if ( $stepsize ) { $qs .= '#stepSize=' . esc_attr( $stepsize ); }
    664664    if ( $playlist ) { $action = 'playlist?list=';} else { $action = 'watch?v='; }
    665665
    666     return lyte_parse( $proto . '://www.youtube.com/' . $action . $id . $qs );
     666    return lyte_parse( $proto . '://www.youtube.com/' . $action . esc_attr( $id ) . $qs );
    667667}
    668668

  • wp-youtube-lyte/trunk/readme.txt

    r3395377 r3482595  
    66License URI: [https://www.gnu.org/licenses/gpl-3.0.html](https://www.gnu.org/licenses/gpl-3.0.html)
    77Requires at least: 6.0
    8 Tested up to: 6.9
    9 Stable tag: 1.7.29
     8Tested up to: 7.0
     9Stable tag: 1.7.30
    1010
    1111High performance YouTube video, playlist and audio-only embeds which don't slow down your blog and offer optimal accessibility.
    … …  
    145145
    146146== Changelog ==
     147
     148= 1.7.30 =
     149* avoid error logging when both description and title are not set
     150* improve shortcode output sanitization to prevent possible Authenticated Stored Cross-Site Scripting as reported by Muhammad Yudha
     151* tested with WordPress 7.0 (beta)
    147152
    148153= 1.7.29 =

  • wp-youtube-lyte/trunk/wp-youtube-lyte.php

    r3395377 r3482595  
    55Description: Lite and accessible YouTube audio and video embedding.
    66Author: Frank Goossens (futtta)
    7 Version: 1.7.29
     7Version: 1.7.30
    88Author URI: http://blog.futtta.be/
    99Text Domain: wp-youtube-lyte
    … …  
    1515
    1616$debug           = false;
    17 $lyte_version    = '1.7.29';
     17$lyte_version    = '1.7.30';
    1818$lyte_db_version = get_option( 'lyte_version', 'none' );
    1919
    … …  
    533533
    534534                // try to ensure description is never empty to avoid Google structured data test tool complaining about it missing.
    535                 if ( ! array_key_exists( 'description', $_thisLyte ) || empty( $_thisLyte['description'] ) ) {
     535                if ( array_key_exists( 'title', $_thisLyte ) && ( ! array_key_exists( 'description', $_thisLyte ) || empty( $_thisLyte['description'] ) ) ) {
    536536                    $_thisLyte['description'] = $_thisLyte['title'];
    537537                }
    … …  
    658658
    659659    if ($audio) { $proto = 'httpa'; } else { $proto = 'httpv'; }
    660     if ( $start !== '' ) { $qs .= '&start=' . $start; }
     660    if ( $start !== '' ) { $qs .= '&start=' . esc_attr( $start ); }
    661661    if ( $showinfo === 'false' ) { $qs .= '&showinfo=0'; }
    662662    if ( $hqthumb ) { $qs .= '&hqThumb=1'; }
    663     if ( $stepsize ) { $qs .= '#stepSize=' . $stepsize; }
     663    if ( $stepsize ) { $qs .= '#stepSize=' . esc_attr( $stepsize ); }
    664664    if ( $playlist ) { $action = 'playlist?list=';} else { $action = 'watch?v='; }
    665665
    666     return lyte_parse( $proto . '://www.youtube.com/' . $action . $id . $qs );
     666    return lyte_parse( $proto . '://www.youtube.com/' . $action . esc_attr( $id ) . $qs );
    667667}
    668668
Note: See TracChangeset for help on using the changeset viewer.