WordPress.org
Get WordPress

Plugin Directory

Changeset 3491781


Ignore:
Timestamp:
03/26/2026 12:34:04 PM (7 days ago)
Author:
DvanKooten
Message:

v4.12.1

Location:
mailchimp-for-wp
Files:
12 edited
1 copied

Legend:

Unmodified
Added
Removed

  • mailchimp-for-wp/tags/4.12.1/CHANGELOG.md

    r3477825 r3491781  
    11Changelog
    22=========
     3
     4
     5#### 4.12.1 - Mar 26, 2026
     6
     7- Supply a custom capability type to `register_post_type` for the `mc4wp-form` post type.
     8- Limit allowed HTML in the various form messages to a safe subset on load (versus only on update).
     9
    310
    411#### 4.12.0 - Mar 9, 2026
    … …  
    1623- Add autocomplete attribute to form fields.
    1724- Enable live updates in Gravity Forms editor.
    18 
    1925
    2026

  • mailchimp-for-wp/tags/4.12.1/includes/forms/class-form-element.php

    r3477825 r3491781  
    113113        }
    114114
    115         $html = sprintf('<div class="mc4wp-alert mc4wp-%s" role="alert"><p>%s</p></div>', esc_attr($notice->type), $notice->text);
    116         return $html;
     115        return sprintf('<div class="mc4wp-alert mc4wp-%s" role="alert"><p>%s</p></div>', esc_attr($notice->type), $notice->text);
    117116    }
    118117

  • mailchimp-for-wp/tags/4.12.1/includes/forms/class-form-manager.php

    r3227253 r3491781  
    110110                ],
    111111                'public' => false,
     112                'capability_type' => 'mc4wp-form',
     113                'map_meta_cap' => true,
    112114            ]
    113115        );

  • mailchimp-for-wp/tags/4.12.1/includes/forms/class-form.php

    r3477825 r3491781  
    292292        }
    293293
     294        // restrict allowed HTML in messages to a safe subset
     295        $allowed_attributes = array_fill_keys([ 'class', 'id', 'style', 'href', 'target', 'src', 'width', 'height', 'alt' ], true);
     296        $allowed_html = array_fill_keys([ 'strong', 'b', 'em', 'i', 'a', 'br', 'span', 'img' ], $allowed_attributes);
     297
    294298        foreach ($messages as $key => $message_text) {
    295299            // overwrite default text with text in form meta.
    296300            if (isset($post_meta[ 'text_' . $key ][0])) {
    297                 $message_text = $post_meta[ 'text_' . $key ][0];
     301                $message_text = wp_kses($post_meta[ 'text_' . $key ][0], $allowed_html);
    298302            }
    299303

  • mailchimp-for-wp/tags/4.12.1/mailchimp-for-wp.php

    r3477825 r3491781  
    55Plugin URI: https://www.mc4wp.com/#utm_source=wp-plugin&utm_medium=mailchimp-for-wp&utm_campaign=plugins-page
    66Description: Mailchimp for WordPress by ibericode. Adds various highly effective sign-up methods to your site.
    7 Version: 4.12.0
     7Version: 4.12.1
    88Author: ibericode
    99Author URI: https://www.ibericode.com/
    … …  
    4646
    4747    // bootstrap the core plugin
    48     define('MC4WP_VERSION', '4.12.0');
     48    define('MC4WP_VERSION', '4.12.1');
    4949    define('MC4WP_PLUGIN_DIR', __DIR__);
    5050    define('MC4WP_PLUGIN_FILE', __FILE__);

  • mailchimp-for-wp/tags/4.12.1/readme.txt

    r3477825 r3491781  
    55Requires at least: 4.6
    66Tested up to: 6.9.1
    7 Stable tag: 4.12.0
     7Stable tag: 4.12.1
    88License: GPL-3.0-or-later
    99License URI: http://www.gnu.org/licenses/gpl-3.0.html
    … …  
    190190
    191191
     192
     193#### 4.12.1 - Mar 26, 2026
     194
     195- Supply a custom capability type to `register_post_type` for the `mc4wp-form` post type.
     196- Limit allowed HTML in the various form messages to a safe subset on load (versus only on update).
     197
     198
    192199#### 4.12.0 - Mar 9, 2026
    193200
    … …  
    204211- Add autocomplete attribute to form fields.
    205212- Enable live updates in Gravity Forms editor.
    206 
    207213
    208214
    … …  
    11301136
    11311137- Obfuscate all email addresses in debug log. Thanks [Sauli Lepola](https://twitter.com/SJLfi).
    1132 - Ask for confirmation before disabling double opt-in, which we do not recommend.
    1133 - Allow vertical resizing of debug log.
    1134 - Failsafe against including JavaScript file twice.
    1135 - No longer wrapping CF7 checkbox in paragraph tags.
    1136 
    1137 **Additions**
    1138 
    1139 - Added `mc4wp_form_api_error` action ...
     1138- ...
    11401139
    11411140== Upgrade Notice ==

  • mailchimp-for-wp/trunk/CHANGELOG.md

    r3477825 r3491781  
    11Changelog
    22=========
     3
     4
     5#### 4.12.1 - Mar 26, 2026
     6
     7- Supply a custom capability type to `register_post_type` for the `mc4wp-form` post type.
     8- Limit allowed HTML in the various form messages to a safe subset on load (versus only on update).
     9
    310
    411#### 4.12.0 - Mar 9, 2026
    … …  
    1623- Add autocomplete attribute to form fields.
    1724- Enable live updates in Gravity Forms editor.
    18 
    1925
    2026

  • mailchimp-for-wp/trunk/includes/forms/class-form-element.php

    r3477825 r3491781  
    113113        }
    114114
    115         $html = sprintf('<div class="mc4wp-alert mc4wp-%s" role="alert"><p>%s</p></div>', esc_attr($notice->type), $notice->text);
    116         return $html;
     115        return sprintf('<div class="mc4wp-alert mc4wp-%s" role="alert"><p>%s</p></div>', esc_attr($notice->type), $notice->text);
    117116    }
    118117

  • mailchimp-for-wp/trunk/includes/forms/class-form-manager.php

    r3227253 r3491781  
    110110                ],
    111111                'public' => false,
     112                'capability_type' => 'mc4wp-form',
     113                'map_meta_cap' => true,
    112114            ]
    113115        );

  • mailchimp-for-wp/trunk/includes/forms/class-form.php

    r3477825 r3491781  
    292292        }
    293293
     294        // restrict allowed HTML in messages to a safe subset
     295        $allowed_attributes = array_fill_keys([ 'class', 'id', 'style', 'href', 'target', 'src', 'width', 'height', 'alt' ], true);
     296        $allowed_html = array_fill_keys([ 'strong', 'b', 'em', 'i', 'a', 'br', 'span', 'img' ], $allowed_attributes);
     297
    294298        foreach ($messages as $key => $message_text) {
    295299            // overwrite default text with text in form meta.
    296300            if (isset($post_meta[ 'text_' . $key ][0])) {
    297                 $message_text = $post_meta[ 'text_' . $key ][0];
     301                $message_text = wp_kses($post_meta[ 'text_' . $key ][0], $allowed_html);
    298302            }
    299303

  • mailchimp-for-wp/trunk/mailchimp-for-wp.php

    r3477825 r3491781  
    55Plugin URI: https://www.mc4wp.com/#utm_source=wp-plugin&utm_medium=mailchimp-for-wp&utm_campaign=plugins-page
    66Description: Mailchimp for WordPress by ibericode. Adds various highly effective sign-up methods to your site.
    7 Version: 4.12.0
     7Version: 4.12.1
    88Author: ibericode
    99Author URI: https://www.ibericode.com/
    … …  
    4646
    4747    // bootstrap the core plugin
    48     define('MC4WP_VERSION', '4.12.0');
     48    define('MC4WP_VERSION', '4.12.1');
    4949    define('MC4WP_PLUGIN_DIR', __DIR__);
    5050    define('MC4WP_PLUGIN_FILE', __FILE__);

  • mailchimp-for-wp/trunk/readme.txt

    r3477825 r3491781  
    55Requires at least: 4.6
    66Tested up to: 6.9.1
    7 Stable tag: 4.12.0
     7Stable tag: 4.12.1
    88License: GPL-3.0-or-later
    99License URI: http://www.gnu.org/licenses/gpl-3.0.html
    … …  
    190190
    191191
     192
     193#### 4.12.1 - Mar 26, 2026
     194
     195- Supply a custom capability type to `register_post_type` for the `mc4wp-form` post type.
     196- Limit allowed HTML in the various form messages to a safe subset on load (versus only on update).
     197
     198
    192199#### 4.12.0 - Mar 9, 2026
    193200
    … …  
    204211- Add autocomplete attribute to form fields.
    205212- Enable live updates in Gravity Forms editor.
    206 
    207213
    208214
    … …  
    11301136
    11311137- Obfuscate all email addresses in debug log. Thanks [Sauli Lepola](https://twitter.com/SJLfi).
    1132 - Ask for confirmation before disabling double opt-in, which we do not recommend.
    1133 - Allow vertical resizing of debug log.
    1134 - Failsafe against including JavaScript file twice.
    1135 - No longer wrapping CF7 checkbox in paragraph tags.
    1136 
    1137 **Additions**
    1138 
    1139 - Added `mc4wp_form_api_error` action ...
     1138- ...
    11401139
    11411140== Upgrade Notice ==
Note: See TracChangeset for help on using the changeset viewer.