Changeset 3440083 for shapepress-dsgvo

Timestamp:

01/15/2026 07:29:34 AM (2 months ago)

Author:

legalweb

Message:

3.1.37

Location:

shapepress-dsgvo/trunk

Files:

• README.txt (modified) (3 diffs)
• public/shortcodes/content-block-shortcode.php (modified) (1 diff)
• sp-dsgvo.php (modified) (2 diffs)

shapepress-dsgvo/trunk/README.txt

@@ -5 +5 @@
 Requires at least: 3.0.1
 Tested up to: 6.8.0
-Stable tag: 3.1.35
+Stable tag: 3.1.37
 Requires PHP: 5.6.0
 License: GPLv2 or later
@@ -142 +142 @@
 
 == Changelog ==
+= 3.1.37 =
+* security fix for content block shortcode
+
 = 3.1.36 =
 * changed name from DWZI GmbH to Mana-I Navodaya GmbH
@@ -162 +165 @@
 * removed Google Fonts
 
-= 3.1.29 =
-* changed company names of Facebook
-* added imprint url and privacy policy url to wpml-config.xml to support translationing of these urls
-* added secure cookie option on https
-
-= 3.1.28 =
-* fixed cookie notice preview images
-
-= 3.1.27 =
-* improved sanitation and escaping
-* fixed errors at unsubscribe and subject access request
-
-= 3.1.26 =
-* improved sanitation and escaping
-
 == Upgrade Notice ==
 = 3.1.10 =

shapepress-dsgvo/trunk/public/shortcodes/content-block-shortcode.php

@@ -14 +14 @@
     //$OL3_LIBS_LOADED = 0;
 
-    $shortcode = $params['shortcode'];
+    $shortcode = sanitize_key($params['shortcode']);
     if (empty($shortcode) == false) $content = do_shortcode("[" . $shortcode ."]");
 
     $embeddingApi = SPDSGVOEmbeddingsManager::getInstance()->getEmbeddingApiBySlug($slug);
-    if ($embeddingApi == null) return $content;
+    if ($embeddingApi == null) return wp_kses_post($content);
     // if its allowed by cookie nothing is to do here. otherwise replace iframes, show image, add optin handler
     if ($embeddingApi->checkIfIntegrationIsAllowed($embeddingApi->slug) == true) return $content;

shapepress-dsgvo/trunk/sp-dsgvo.php

@@ -17 +17 @@
  * Plugin URI:        https://legalweb.io
  * Description:       WP DSGVO Tools (GDPR) help you to fulfill the GDPR (DGSVO)  compliance guidance (<a target="_blank" href="https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/">GDPR</a>)
- * Version:           3.1.36
+ * Version:           3.1.37
  * Author:            legalweb
  * Author URI:        https://www.legalweb.io
@@ -29 +29 @@
 }
 
-define('sp_dsgvo_VERSION', '3.1.36');
+define('sp_dsgvo_VERSION', '3.1.37');
 define('sp_dsgvo_NAME', 'sp-dsgvo');
 define('sp_dsgvo_PLUGIN_NAME', 'shapepress-dsgvo');