Changeset 3470689

Timestamp:

02/26/2026 09:11:43 PM (4 weeks ago)

Author:

timwhitlock

Message:

Added code_view setting with x3 levels

Location:

loco-translate/trunk

Files:

• languages/loco-translate.pot (modified) (8 diffs)
• readme.txt (modified) (1 diff)
• src/ajax/FsReferenceController.php (modified) (2 diffs)
• src/data/Settings.php (modified) (3 diffs)
• tpl/admin/config/settings.php (modified) (1 diff)

loco-translate/trunk/languages/loco-translate.pot

@@ -4 +4 @@
 "Project-Id-Version: Loco Translate 2.8.2-dev\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/loco-translate/\n"
-"POT-Creation-Date: 2026-02-10 10:05+0000\n"
+"POT-Creation-Date: 2026-02-26 21:11+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
@@ -276 +276 @@
 msgstr ""
 
+#: tpl/admin/config/settings.php:211
+msgid "Admins only"
+msgstr ""
+
 #: src/admin/bundle/BaseController.php:102 tpl/admin/file/conf.php:58
 #: tpl/admin/file/move.php:26
@@ -300 +304 @@
 msgstr ""
 
-#: src/admin/config/SettingsController.php:66
+#: src/admin/config/SettingsController.php:66 tpl/admin/config/settings.php:212
 msgid "Allow"
 msgstr ""
@@ -308 +312 @@
 msgstr ""
 
-#: tpl/admin/config/settings.php:216
+#: tpl/admin/config/settings.php:226
 msgid "Allow full access to these roles"
 msgstr ""
@@ -577 +581 @@
 msgstr ""
 
-#: src/admin/config/SettingsController.php:68
+#: src/admin/config/SettingsController.php:68 tpl/admin/config/settings.php:210
 msgid "Disallow"
 msgstr ""
 
 #: src/admin/file/EditController.php:132 src/admin/file/EditController.php:183
-#: src/admin/bundle/LocaleController.php:138 tpl/admin/config/settings.php:234
+#: src/admin/bundle/LocaleController.php:138 tpl/admin/config/settings.php:244
 #: tpl/admin/config/apis.php:167 tpl/admin/config/prefs.php:45
 #: tpl/admin/common/inc-fsconn.php:16 tpl/admin/common/inc-fsconn.php:41
@@ -1009 +1013 @@
 msgstr ""
 
-#: tpl/admin/config/settings.php:210
+#: tpl/admin/config/settings.php:220
 msgid "Grant access to roles"
 msgstr ""
@@ -1628 +1632 @@
 msgstr ""
 
-#: tpl/admin/config/settings.php:233 tpl/admin/config/apis.php:166
+#: tpl/admin/config/settings.php:243 tpl/admin/config/apis.php:166
 #: tpl/admin/config/prefs.php:44
 msgid "Save settings"
@@ -1724 +1728 @@
 #: src/admin/file/BaseController.php:118
 msgid "Source"
+msgstr ""
+
+#: tpl/admin/config/settings.php:207
+msgid "Source code viewer access"
 msgstr ""
 

loco-translate/trunk/readme.txt

@@ -103 +103 @@
 
 = 2.8.2 =
+* Fix for LLMs retaining escaped forward slashes
 * Bumped WordPress compatibility to 6.9.1
 

loco-translate/trunk/src/ajax/FsReferenceController.php

@@ -78 +78 @@
     public function render(){
         $post = $this->validate();
-        
+
+        // enforce code_view access setting before doing anything else
+        $conf = Loco_data_Settings::get();
+        $code_view = (int) $conf->code_view;
+        if( 0 === $code_view ){
+            throw new Loco_error_Exception('Source code viewer is disabled');
+        }
+        if( 1 === $code_view && ! current_user_can('manage_options') ){
+            throw new Loco_error_Exception('Source code viewer requires administrator privileges');
+        }
+
         // at the very least we need a reference to examine
         if( ! $post->has('ref') ){
@@ -103 +113 @@
         
         // validate allowed source file types, including custom aliases
-        $conf = Loco_data_Settings::get();
         $ext = strtolower( $srcfile->extension() );
         $type = $conf->ext2type($ext,'none');

loco-translate/trunk/src/data/Settings.php

@@ -21 +21 @@
  * @property bool $jed_clean Whether to clean up redundant JSON files during compilation
  * @property bool $ajax_files Whether to submit PO data as concrete files (requires Blob support in Ajax)
- * 
+ * @property int $code_view Access level for source code snippet viewer (0:disabled, 1:admins only, 2:all users)
+ *
  * @property string $deepl_api_key API key for DeepL Translator
  * @property string $google_api_key API key for Google Translate
@@ -37 +38 @@
     /**
      * Global instance of this plugin's settings
-     * @var Loco_data_Settings
-     */
-    private static $current;
+     */
+    private static ?Loco_data_Settings $current = null;
 
 
     /**
      * Available options and their defaults
-     * @var array
-     */
-    private static $defaults =  [
+     */
+    private static array $defaults =  [
         'version' => '',
         'gen_hash' => false,
@@ -65 +64 @@
         'jed_clean' => false,
         'ajax_files' => true,
+        'code_view' => 1,
         'deepl_api_key' => '',
         'google_api_key' => '',

loco-translate/trunk/tpl/admin/config/settings.php

@@ -203 +203 @@
                                 </select>
                             </p>
+                            <p>
+                                <label for="loco--code-view">
+                                    <?php esc_html_e('Source code viewer access','loco-translate');?>:
+                                </label>
+                                <select name="opts[code_view]" id="loco--code-view">
+                                    <option value="0"><?php esc_html_e('Disallow','loco-translate')?></option>
+                                    <option value="1"<?php echo 1 === $opts->code_view?' selected':''?>><?php esc_html_e('Admins only','loco-translate')?></option>
+                                    <option value="2"<?php echo 2 === $opts->code_view?' selected':''?>><?php esc_html_e('Allow','loco-translate')?></option>
+                                </select>
+                            </p>
                         </fieldset>
                     </td>