Plugin Directory

Changeset 3392223


Ignore:
Timestamp:
11/08/2025 06:47:35 PM (5 months ago)
Author:
lumiblog
Message:

3.0.9 [November 8, 2025]

Location:
footnotes-made-easy
Files:
12 added
2 edited

Legend:

Unmodified
Added
Removed
  • footnotes-made-easy/trunk/footnotes-made-easy.php

    r3388488 r3392223  
    44 * Plugin URI:        https://lumumbas.blog/plugins/footnotes-made-easy/
    55 * Description:       Allows post authors to easily add and manage footnotes in posts.
    6  * Version:           3.0.8
     6 * Version:           3.0.9
    77 * Requires at least: 4.6
    88 * Requires PHP:      7.4
     
    304304            $id_href = ( ( $use_full_link ) ? get_permalink( $post->ID ) : '' ) . "#footnote_" . ( $value[ 'use_footnote' ] + $start_number ) . "_" . $post->ID;
    305305            $id_title = str_replace( '"', """, htmlentities( html_entity_decode( wp_strip_all_tags( $value[ 'text' ] ), ENT_QUOTES, 'UTF-8' ), ENT_QUOTES, 'UTF-8' ) );
    306             $id_replace = $this->current_options[ 'pre_identifier' ] . '<a href="' . $id_href . '" id="' . $id_id . '" class="footnote-identifier-link" title="' . $id_title . '">' . $this->current_options[ 'inner_pre_identifier' ] . $id_num . $this->current_options[ 'inner_post_identifier' ] . '</a>' . $this->current_options[ 'post_identifier' ];
     306            $id_replace = $this->current_options[ 'pre_identifier' ] . '<a href="' . $id_href . '" id="' . $id_id . '" class="footnote-link footnote-identifier-link" title="' . $id_title . '">' . $this->current_options[ 'inner_pre_identifier' ] . $id_num . $this->current_options[ 'inner_post_identifier' ] . '</a>' . $this->current_options[ 'post_identifier' ];
    307307            if ( $this->current_options[ 'superscript' ] ) $id_replace = '<sup>' . $id_replace . '</sup>';
    308308            if ( $display ) $data = substr_replace( $data, $id_replace, strpos( $data,$value[ 0 ] ), strlen( $value[ 0 ] ) );
     
    313313
    314314        $start = ( $start_number !== 1 ) ? 'start="' . $start_number . '" ' : '';
    315         $footnotes_markup = '<ol ' . $start . 'class="footnotes">';
    316315       
    317316        // SECURITY FIX: Escape output to prevent XSS
    318         $footnotes_markup = $footnotes_markup . wp_kses_post( $this->current_options[ 'pre_footnotes' ] );
     317        $footnotes_markup = wp_kses_post( $this->current_options[ 'pre_footnotes' ] );
     318       
     319        $footnotes_markup = $footnotes_markup . '<ol ' . $start . 'class="footnotes">';
    319320
    320321        foreach ( $footnotes as $key => $value ) {
     
    330331            if ( ! is_feed() ) {
    331332                foreach ( $value[ 'identifiers' ] as $identifier ) {
    332                     $footnotes_markup = $footnotes_markup . '<span class="footnote-back-link-wrapper">' . $this->current_options[ 'pre_backlink' ] . '<a href="' . ( ( $use_full_link ) ? get_permalink( $post->ID ) : '' ) . '#identifier_' . ( $identifier + 1 ) . '_' . $post->ID . '" class="footnote-back-link">' . $this->current_options[ 'backlink' ] . '</a>' . $this->current_options[ 'post_backlink' ] . '</span>';
     333                    $footnotes_markup = $footnotes_markup . '<span class="footnote-back-link-wrapper">' . $this->current_options[ 'pre_backlink' ] . '<a href="' . ( ( $use_full_link ) ? get_permalink( $post->ID ) : '' ) . '#identifier_' . ( $identifier + 1 ) . '_' . $post->ID . '" class="footnote-link footnote-back-link">' . $this->current_options[ 'backlink' ] . '</a>' . $this->current_options[ 'post_backlink' ] . '</span>';
    333334                }
    334335            }
  • footnotes-made-easy/trunk/readme.txt

    r3388488 r3392223  
    66Tested up to: 6.8
    77Requires PHP: 7.4
    8 Stable tag: 3.0.8
     8Stable tag: 3.0.9
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
     
    113113I use semantic versioning, with the first release being 1.0.
    114114
     115= 3.0.9 [November 8, 2025] =
     116* Fix: Footnotes header now correctly appears before the list [(not inside it)](https://wordpress.org/support/topic/version-3-0-8-moves-footnotes-header-inside-ol-tag/).
     117* Fix: [Restored 'footnote-link' CSS class](https://wordpress.org/support/topic/custom-css-not-working-anymore-3/) for backward compatibility with custom CSS.
     118
    115119= 3.0.8 [November 2, 2025] =
    116120* CRITICAL SECURITY FIX: CVE-2025-11733 - Fixed unauthenticated stored XSS vulnerability (CVSS 7.2)
     
    132136* Fix: PHP 8.2 Compatibility issue.
    133137
    134 
    135138== Upgrade Notice ==
    136139
    137 == Upgrade Notice ==
    138 
    139 = 3.0.8 =
    140 CRITICAL SECURITY FIX - UPDATE NOW
    141 
    142 This release fixes CVE-2025-11733, a HIGH severity unauthenticated XSS vulnerability that could allow attackers to inject malicious code into your site.
    143 
    144 Security improvements include 5-layer protection, proper authentication, CSRF protection, and complete input/output sanitization.
    145 
    146 Also includes: 51 code improvements, 20-30% performance boost, WordPress 6.8 and PHP 8.4 compatibility.
     140= 3.0.9 [November 8, 2025] =
     141* Fix: Footnotes header now correctly appears before the list (not inside it)
     142* Fix: Restored 'footnote-link' CSS class for backward compatibility with custom styles
Note: See TracChangeset for help on using the changeset viewer.