vaakash
Forum Replies Created
-
Hi @riceooks,
Thanks for reporting thsi issue. I’ll fix this in the next release targetted for WP 7.1
Hi @webw4tcher,
Thanks for using Shortcoder. Yes that is an expected change as per security comments. An editor user is able to view and insert shortcodes which admin user has created. This was raised for discussion and a restriction was imposed.
I’ll think about for a wayto bring back this option in the next version of the plugin targetted for WP 7.1
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Double slash problem (//)Sorry for the late reply and thanks for reporting this. This will be addressed in the next version of the plugin v6.5.4.
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Hi @dfuytn, @martyn-chamberlin,
I have added an option in v6.5.3 under Shortcoder –> Settings to disable sanitization as required. Can you please upgrade to this version and enable this option?
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Shortcode Recursion BugHi @codesmith32,
Thanks for sharing this. I’ll add this to my TODO list and revisit to implement this as required.
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Hi @dfuytn,
My apologies for the delay. I’m considering @martyn-chamberlin option to add a setting to disable this check. Please give me 1 week time. I will release a new version with this option on or before 9th May. Hope you understand.
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Hi @dfuytn,
Can you please send me a DM on my contact form below? There are no other requests for the same fix. While I work on this I can arrange a temp workaround for you to proceed. Please send me a ping and I’ll get back to you.
https://www.aakashweb.com/contact/
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Hi @dfuytn,
I understand you concern. The fix is quite complex 😅. I’m looking at the best way to handle this. Please expect a fix by this Saturday or Sunday.
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Got it. Let me see if I can allow basic HTML. Please expect a fix by next weekend.
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Latest version 6.5.2Hi @dfuytn,
Yes you are right and that is expected in the latest version. I have added certain security checks to strip off malicious scripts. Do you insert JS as custom field value? I’ll revisit and see how this can be handled for these usecases.
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Security alert on pluginHi Everyone,
The security issue reported is relatively minor.
It is fixed in the latest version of the plugin v6.5.2
Please update the the plugin to this latest version.
Thanks,
Aakash
Hi ,
The security issue reported is relatively minor.
It is fixed in the latest version of the plugin v6.5.2
Please update the the plugin to this latest version.
Thanks,
Aakash
Forum: Plugins
In reply to: [Shortcoder — Create Shortcodes for Anything] Cross Site Scripting (XSS)Hi Everyone,
The security issue reported is relatively minor.
It is fixed in the latest version of the plugin v6.5.2
Please update the the plugin to this latest version.
Thanks,
Aakash