Changeset 3360110

Timestamp:

09/11/2025 06:41:23 PM (7 months ago)

Author:

agencydominion

Message:

version 1.7.7

Location:

fusion-extension-gallery/trunk

Files:

• fusion-extension-gallery.php (modified) (1 diff)
• includes/extensions/gallery.php (modified) (5 diffs)
• readme.txt (modified) (2 diffs)

fusion-extension-gallery/trunk/fusion-extension-gallery.php

@@ -8 +8 @@
  * Plugin URI: http://www.agencydominion.com/fusion/
  * Description: Gallery Extension Package for Fusion.
- * Version: 1.7.6
+ * Version: 1.7.7
  * Author: Agency Dominion
  * Author URI: http://agencydominion.com

fusion-extension-gallery/trunk/includes/extensions/gallery.php

@@ -1356 +1356 @@
                         $item_content_output .= !empty($gallery_item_headline) ? '<h2 class="gallery-item-headline">' . esc_html($gallery_item_headline) . '</h2>' : '';
                         $item_content_output .= !empty($gallery_item_subheadline) ? '<h3 class="gallery-item-subheadline">' . esc_html($gallery_item_subheadline) . '</h3>' : '';
-                        $item_content_output .= !empty($gallery_item_description) ? '<div class="gallery-item-desc">'. do_shortcode($gallery_item_description) .'</div>' : '';
+                        $item_content_output .= !empty($gallery_item_description) ? '<div class="gallery-item-desc">'. do_shortcode(wp_kses_post($gallery_item_description)) .'</div>' : '';
                         if (!empty($button_object)) {
                             $button_classes = apply_filters('fsn_masthead_button_class', 'gallery-item-button', $atts);
@@ -1458 +1458 @@
                     $item_content_output .= !empty($gallery_item_headline) ? '<h2 class="gallery-item-headline">' . esc_html($gallery_item_headline) . '</h2>' : '';
                     $item_content_output .= !empty($gallery_item_subheadline) ? '<h3 class="gallery-item-subheadline">' . esc_html($gallery_item_subheadline) . '</h3>' : '';
-                    $item_content_output .= !empty($gallery_item_description) ? '<div class="gallery-item-desc">'. do_shortcode($gallery_item_description) .'</div>' : '';
+                    $item_content_output .= !empty($gallery_item_description) ? '<div class="gallery-item-desc">'. do_shortcode(wp_kses_post($gallery_item_description)) .'</div>' : '';
                     if (!empty($button_object)) {
                         $button_classes = apply_filters('fsn_masthead_button_class', 'gallery-item-button', $atts);
@@ -1488 +1488 @@
                 //decode custom entities to avoid JS errors
                 $gallery_item_description = FusionCore::decode_custom_entities($gallery_item_description);
+                //sanitize for safe output in JavaScript
+                $gallery_item_description = wp_kses_post($gallery_item_description);
                 $fsn_masthead_photoswipe_array[] = array(
                     'src' => esc_url($attachment_attrs[0]),
@@ -1616 +1618 @@
         $attachment_attrs = wp_get_attachment_image_src( $attachment->ID, 'hi-res' );
         $gallery_item_description = apply_filters('fsn_inline_item_photoswipe_caption', $attachment->post_excerpt, $atts);
+        //sanitize for safe output in JavaScript
+        $gallery_item_description = wp_kses_post($gallery_item_description);
         $fsn_inline_photoswipe_array[] = array(
             'src' => esc_url($attachment_attrs[0]),
@@ -1898 +1902 @@
                     $carousel_item_content_output .= '<'. $fsn_carousel_view_options['headline_size'] .'>'. (!empty($button_object) ? '<a'. fsn_get_button_anchor_attributes($button_object) .'>' : '') . esc_html($gallery_item_headline) . (!empty($button_object) ? '</a>' : '') .'</'. $fsn_carousel_view_options['headline_size'] .'>';
                 }
-                $carousel_item_content_output .= !empty($gallery_item_description) && $fsn_carousel_view_options['description'] === true ? do_shortcode($gallery_item_description) : '';
+                $carousel_item_content_output .= !empty($gallery_item_description) && $fsn_carousel_view_options['description'] === true ? do_shortcode(wp_kses_post($gallery_item_description)) : '';
                 if (!empty($button_object) && $fsn_carousel_view_options['button'] === true) {
                     $button_classes = apply_filters('fsn_carousel_button_class', 'carousel-item-button');

fusion-extension-gallery/trunk/readme.txt

@@ -3 +3 @@
 Tags: admin, custom, builder, page builder, layout builder, layout, page, columns, multi-column, grid, responsive, shortcode, bootstrap, image, gallery, carousel, masthead
 Requires at least: 3.9
-Tested up to: 5.8.2
-Stable tag: 1.7.6
+Tested up to: 6.8.2
+Stable tag: 1.7.7
 License: GPLv2
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -50 +50 @@
 
 == Changelog ==
+
+= 1.7.7 =
+* Minor security fix.
 
 = 1.7.6 =