Changeset 3104021

Timestamp:

06/18/2024 10:55:48 AM (22 months ago)

Author:

joostdevalk

Message:

Update to version 0.9.2 from GitHub

Location:

progress-planner

Files:

• tags/0.9.2 (copied) (copied from progress-planner/trunk)
• tags/0.9.2/CHANGELOG.md (added)
• tags/0.9.2/SECURITY.md (added)
• tags/0.9.2/classes/class-rest-api.php (modified) (1 diff)
• tags/0.9.2/progress-planner.php (modified) (1 diff)
• tags/0.9.2/readme.txt (modified) (4 diffs)
• trunk/CHANGELOG.md (added)
• trunk/SECURITY.md (added)
• trunk/classes/class-rest-api.php (modified) (1 diff)
• trunk/progress-planner.php (modified) (1 diff)
• trunk/readme.txt (modified) (4 diffs)

progress-planner/tags/0.9.2/classes/class-rest-api.php

@@ -185 +185 @@
     public function validate_token( $token ) {
         $token       = str_replace( 'token/', '', $token );
-        $license_key = \get_option( 'progress_planner_license_key' );
-        return ! $license_key || $token === $license_key;
+        $license_key = \get_option( 'progress_planner_license_key', false );
+
+        return $license_key && $token === $license_key;
     }
 }

progress-planner/tags/0.9.2/progress-planner.php

@@ -10 +10 @@
  * Requires at least: 6.3
  * Requires PHP:      7.4
- * Version:           0.9.1
+ * Version:           0.9.2
  * Author:            Team Emilia Projects
  * Author URI:        https://progressplanner.com/about-progress-planner/

progress-planner/tags/0.9.2/readme.txt

@@ -5 +5 @@
 Tested up to: 6.5
 Requires PHP: 7.4
-Stable tag: 0.9.1
+Stable tag: 0.9.2
 License: GPL3+
 License URI: https://www.gnu.org/licenses/gpl-3.0.en.html
@@ -49 +49 @@
 = Where do I file bugs? =
 
-If you've found a bug, please report it on [our GitHub repository](https://github.com/emilia-Capital/progress-planner/issues/). You'd help us a lot by searching for existing issues first.
+If you've found a bug, please follow the following steps:
+
+1. If it's a security report, please report it through our [PatchStack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/progress-planner).
+2. If it's not a security report, search through the open issues on [our GitHub repository](https://github.com/emilia-Capital/progress-planner/issues/) to see if there's already an issue for this problem.
+3. If if doesn't exist yet, file a [bug report on GitHub](https://github.com/Emilia-Capital/progress-planner/issues/new/choose).
 
 == Installation ==
@@ -71 +75 @@
 == Changelog ==
 
+= 0.9.2 =
+
+Security:
+
+* Fixes a vulnerability in our REST API endpoint access validation to retrieve stats. Props to [Djennez](https://github.com/Djennez) for reporting through our [PatchStack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/progress-planner).
+
 = 0.9.1 =
 
@@ -87 +97 @@
 * Don't show the password reset link during onboarding of users as it leads to confusion. Thanks to [Jose Varghese](https://github.com/josevarghese) for reporting.
 
-
 = 0.9 =
 

progress-planner/trunk/classes/class-rest-api.php

@@ -185 +185 @@
     public function validate_token( $token ) {
         $token       = str_replace( 'token/', '', $token );
-        $license_key = \get_option( 'progress_planner_license_key' );
-        return ! $license_key || $token === $license_key;
+        $license_key = \get_option( 'progress_planner_license_key', false );
+
+        return $license_key && $token === $license_key;
     }
 }

progress-planner/trunk/progress-planner.php

@@ -10 +10 @@
  * Requires at least: 6.3
  * Requires PHP:      7.4
- * Version:           0.9.1
+ * Version:           0.9.2
  * Author:            Team Emilia Projects
  * Author URI:        https://progressplanner.com/about-progress-planner/

progress-planner/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 6.5
 Requires PHP: 7.4
-Stable tag: 0.9.1
+Stable tag: 0.9.2
 License: GPL3+
 License URI: https://www.gnu.org/licenses/gpl-3.0.en.html
@@ -49 +49 @@
 = Where do I file bugs? =
 
-If you've found a bug, please report it on [our GitHub repository](https://github.com/emilia-Capital/progress-planner/issues/). You'd help us a lot by searching for existing issues first.
+If you've found a bug, please follow the following steps:
+
+1. If it's a security report, please report it through our [PatchStack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/progress-planner).
+2. If it's not a security report, search through the open issues on [our GitHub repository](https://github.com/emilia-Capital/progress-planner/issues/) to see if there's already an issue for this problem.
+3. If if doesn't exist yet, file a [bug report on GitHub](https://github.com/Emilia-Capital/progress-planner/issues/new/choose).
 
 == Installation ==
@@ -71 +75 @@
 == Changelog ==
 
+= 0.9.2 =
+
+Security:
+
+* Fixes a vulnerability in our REST API endpoint access validation to retrieve stats. Props to [Djennez](https://github.com/Djennez) for reporting through our [PatchStack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/progress-planner).
+
 = 0.9.1 =
 
@@ -87 +97 @@
 * Don't show the password reset link during onboarding of users as it leads to confusion. Thanks to [Jose Varghese](https://github.com/josevarghese) for reporting.
 
-
 = 0.9 =