Changeset 3392223
- Timestamp:
- 11/08/2025 06:47:35 PM (5 months ago)
- Location:
- footnotes-made-easy
- Files:
-
- 12 added
- 2 edited
-
tags/3.0.9 (added)
-
tags/3.0.9/css (added)
-
tags/3.0.9/css/dbad.css (added)
-
tags/3.0.9/css/tooltips.css (added)
-
tags/3.0.9/css/tooltips.min.css (added)
-
tags/3.0.9/footnotes-made-easy.php (added)
-
tags/3.0.9/js (added)
-
tags/3.0.9/js/tooltips.js (added)
-
tags/3.0.9/js/tooltips.min.js (added)
-
tags/3.0.9/options.php (added)
-
tags/3.0.9/readme.txt (added)
-
tags/3.0.9/uninstall.php (added)
-
trunk/footnotes-made-easy.php (modified) (4 diffs)
-
trunk/readme.txt (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
-
footnotes-made-easy/trunk/footnotes-made-easy.php
r3388488 r3392223 4 4 * Plugin URI: https://lumumbas.blog/plugins/footnotes-made-easy/ 5 5 * Description: Allows post authors to easily add and manage footnotes in posts. 6 * Version: 3.0. 86 * Version: 3.0.9 7 7 * Requires at least: 4.6 8 8 * Requires PHP: 7.4 … … 304 304 $id_href = ( ( $use_full_link ) ? get_permalink( $post->ID ) : '' ) . "#footnote_" . ( $value[ 'use_footnote' ] + $start_number ) . "_" . $post->ID; 305 305 $id_title = str_replace( '"', """, htmlentities( html_entity_decode( wp_strip_all_tags( $value[ 'text' ] ), ENT_QUOTES, 'UTF-8' ), ENT_QUOTES, 'UTF-8' ) ); 306 $id_replace = $this->current_options[ 'pre_identifier' ] . '<a href="' . $id_href . '" id="' . $id_id . '" class="footnote- identifier-link" title="' . $id_title . '">' . $this->current_options[ 'inner_pre_identifier' ] . $id_num . $this->current_options[ 'inner_post_identifier' ] . '</a>' . $this->current_options[ 'post_identifier' ];306 $id_replace = $this->current_options[ 'pre_identifier' ] . '<a href="' . $id_href . '" id="' . $id_id . '" class="footnote-link footnote-identifier-link" title="' . $id_title . '">' . $this->current_options[ 'inner_pre_identifier' ] . $id_num . $this->current_options[ 'inner_post_identifier' ] . '</a>' . $this->current_options[ 'post_identifier' ]; 307 307 if ( $this->current_options[ 'superscript' ] ) $id_replace = '<sup>' . $id_replace . '</sup>'; 308 308 if ( $display ) $data = substr_replace( $data, $id_replace, strpos( $data,$value[ 0 ] ), strlen( $value[ 0 ] ) ); … … 313 313 314 314 $start = ( $start_number !== 1 ) ? 'start="' . $start_number . '" ' : ''; 315 $footnotes_markup = '<ol ' . $start . 'class="footnotes">';316 315 317 316 // SECURITY FIX: Escape output to prevent XSS 318 $footnotes_markup = $footnotes_markup . wp_kses_post( $this->current_options[ 'pre_footnotes' ] ); 317 $footnotes_markup = wp_kses_post( $this->current_options[ 'pre_footnotes' ] ); 318 319 $footnotes_markup = $footnotes_markup . '<ol ' . $start . 'class="footnotes">'; 319 320 320 321 foreach ( $footnotes as $key => $value ) { … … 330 331 if ( ! is_feed() ) { 331 332 foreach ( $value[ 'identifiers' ] as $identifier ) { 332 $footnotes_markup = $footnotes_markup . '<span class="footnote-back-link-wrapper">' . $this->current_options[ 'pre_backlink' ] . '<a href="' . ( ( $use_full_link ) ? get_permalink( $post->ID ) : '' ) . '#identifier_' . ( $identifier + 1 ) . '_' . $post->ID . '" class="footnote- back-link">' . $this->current_options[ 'backlink' ] . '</a>' . $this->current_options[ 'post_backlink' ] . '</span>';333 $footnotes_markup = $footnotes_markup . '<span class="footnote-back-link-wrapper">' . $this->current_options[ 'pre_backlink' ] . '<a href="' . ( ( $use_full_link ) ? get_permalink( $post->ID ) : '' ) . '#identifier_' . ( $identifier + 1 ) . '_' . $post->ID . '" class="footnote-link footnote-back-link">' . $this->current_options[ 'backlink' ] . '</a>' . $this->current_options[ 'post_backlink' ] . '</span>'; 333 334 } 334 335 } -
footnotes-made-easy/trunk/readme.txt
r3388488 r3392223 6 6 Tested up to: 6.8 7 7 Requires PHP: 7.4 8 Stable tag: 3.0. 88 Stable tag: 3.0.9 9 9 License: GPLv2 or later 10 10 License URI: http://www.gnu.org/licenses/gpl-2.0.html … … 113 113 I use semantic versioning, with the first release being 1.0. 114 114 115 = 3.0.9 [November 8, 2025] = 116 * Fix: Footnotes header now correctly appears before the list [(not inside it)](https://wordpress.org/support/topic/version-3-0-8-moves-footnotes-header-inside-ol-tag/). 117 * Fix: [Restored 'footnote-link' CSS class](https://wordpress.org/support/topic/custom-css-not-working-anymore-3/) for backward compatibility with custom CSS. 118 115 119 = 3.0.8 [November 2, 2025] = 116 120 * CRITICAL SECURITY FIX: CVE-2025-11733 - Fixed unauthenticated stored XSS vulnerability (CVSS 7.2) … … 132 136 * Fix: PHP 8.2 Compatibility issue. 133 137 134 135 138 == Upgrade Notice == 136 139 137 == Upgrade Notice == 138 139 = 3.0.8 = 140 CRITICAL SECURITY FIX - UPDATE NOW 141 142 This release fixes CVE-2025-11733, a HIGH severity unauthenticated XSS vulnerability that could allow attackers to inject malicious code into your site. 143 144 Security improvements include 5-layer protection, proper authentication, CSRF protection, and complete input/output sanitization. 145 146 Also includes: 51 code improvements, 20-30% performance boost, WordPress 6.8 and PHP 8.4 compatibility. 140 = 3.0.9 [November 8, 2025] = 141 * Fix: Footnotes header now correctly appears before the list (not inside it) 142 * Fix: Restored 'footnote-link' CSS class for backward compatibility with custom styles
Note: See TracChangeset
for help on using the changeset viewer.