WordPress.org
Get WordPress

Plugin Directory

Changeset 3486916


Ignore:
Timestamp:
03/20/2026 03:02:43 AM (13 days ago)
Author:
probonodesign
Message:

v1.2.2: Security improvement - added nonce validation

Location:
probono-form-basic
Files:
30 added
4 edited

Legend:

Unmodified
Added
Removed

  • probono-form-basic/trunk/includes/assets.php

    r3479598 r3486916  
    9393        }, get_pages())) . ';'
    9494    );
     95    $current_tab = 'manage';
     96    if (isset($_GET['tab']) && isset($_GET['_wpnonce']) && wp_verify_nonce(sanitize_key(wp_unslash($_GET['_wpnonce'])), 'probonoform_tab_nonce')) {
     97        $current_tab = sanitize_key(wp_unslash($_GET['tab']));
     98    } elseif (isset($_GET['tab'])) {
     99        $current_tab = sanitize_key(wp_unslash($_GET['tab']));
     100    }
    95101    wp_add_inline_script(
    96102        'probonoform-admin-manage',
    97         'var probonoformCurrentTab = ' . wp_json_encode(
    98             isset($_GET['tab']) ? sanitize_key(wp_unslash($_GET['tab'])) : 'manage'
    99         ) . ';'
     103        'var probonoformCurrentTab = ' . wp_json_encode($current_tab) . ';'
    100104    );
    101105}

  • probono-form-basic/trunk/probonoform.php

    r3479598 r3486916  
    44Plugin URI: https://form.prbn.org/
    55Description: コード不要、ボタンを押すだけで、すぐ使える。日本語サイトのための Made in Japan フォームプラグイン。
    6 Version: 1.2.1
     6Version: 1.2.2
    77Author: Probono Design
    88Author URI: https://prbn.org/
    … …  
    1616}
    1717
    18 define('PROBONOFORM_VERSION', '1.2.1');
     18define('PROBONOFORM_VERSION', '1.2.2');
    1919define('PROBONOFORM_PATH', plugin_dir_path(__FILE__));
    2020define('PROBONOFORM_URL', plugin_dir_url(__FILE__));

  • probono-form-basic/trunk/readme-ja.txt

    r3479598 r3486916  
    66Tested up to: 6.9
    77Requires PHP: 7.4
    8 Stable tag: 1.2.1
     8Stable tag: 1.2.2
    99License: GPLv2 or later
    1010License URI: https://www.gnu.org/licenses/gpl-2.0.html
    … …  
    4848= Pro版について =
    4949
    50 AI清書機能、予約フォーム、高度な日本語特化機能等は、別途Pro版で提供しています。詳細は [https://form.prbn.org](https://form.prbn.org) をご覧ください。
     50AI清書機能、高度な日本語特化機能等は、別途Pro版で提供しています。詳細は [https://form.prbn.org](https://form.prbn.org) をご覧ください。
    5151
    5252== 外部サービス ==
    … …  
    9090== Changelog ==
    9191
     92= 1.2.2 =
     93* セキュリティ改善：nonceバリデーション追加
     94
    9295= 1.2.1 =
    9396* WordPress.org公開
    … …  
    99102== Upgrade Notice ==
    100103
     104= 1.2.2 =
     105セキュリティ改善。
     106
    101107= 1.2.1 =
    102108WordPress.org公開バージョン。

  • probono-form-basic/trunk/readme.txt

    r3479598 r3486916  
    66Tested up to: 6.9
    77Requires PHP: 7.4
    8 Stable tag: 1.2.1
     8Stable tag: 1.2.2
    99License: GPLv2 or later
    1010License URI: https://www.gnu.org/licenses/gpl-2.0.html
    … …  
    4848= Pro Version =
    4949
    50 For advanced features including AI-powered form assistance, booking forms, advanced Japanese features, and more, a separate Pro plugin is available at [https://form.prbn.org](https://form.prbn.org)
     50For advanced features including AI-powered form assistance, advanced Japanese features, and more, a separate Pro plugin is available at [https://form.prbn.org](https://form.prbn.org)
    5151
    5252== External services ==
    … …  
    9090== Changelog ==
    9191
     92= 1.2.2 =
     93* Security improvement: added nonce validation
     94
    9295= 1.2.1 =
    9396* Published on WordPress.org
    … …  
    99102== Upgrade Notice ==
    100103
     104= 1.2.2 =
     105Security improvement.
     106
    101107= 1.2.1 =
    102108Published on WordPress.org.
Note: See TracChangeset for help on using the changeset viewer.