1berry/include-mastodon-feed
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

1.9.11

Browse Source
This commit is contained in:
wolfgang101 2025-01-27 14:48:23 +01:00
commit 0202ca95fc
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
plugin.php
View File

@ -3,7 +3,7 @@
Plugin Name: Include Mastodon Feed
Plugin URI: https://wolfgang.lol/code/include-mastodon-feed-wordpress-plugin
Description: Plugin providing [include-mastodon-feed] shortcode
Version: 1.9.10
Version: 1.9.11
Author: wolfgang.lol
Author URI: https://wolfgang.lol
License: MIT
@ -674,7 +674,6 @@ function display_feed($atts) {
'text-permalinkpost' => INCLUDE_MASTODON_FEED_TEXT_PERMALINK_POST,
'text-edited' => INCLUDE_MASTODON_FEED_TEXT_EDITED,
'date-locale' => INCLUDE_MASTODON_FEED_DATE_LOCALE,
'date-options' => INCLUDE_MASTODON_FEED_DATE_OPTIONS,
'darkmode' => filter_var(esc_html(INCLUDE_MASTODON_FEED_DARKMODE), FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE),
), array_change_key_case($atts, CASE_LOWER)
);

5
readme.txt
View File

@ -5,7 +5,7 @@ Tags: mastodon, status, feed
Requires at least: 6.0
Tested up to: 6.7
Requires PHP: 7.4
Stable tag: 1.9.10
Stable tag: 1.9.11
License: MIT
License URI: https://directory.fsf.org/wiki/License:Expat
@ -152,6 +152,9 @@ Use the following URL to get your ID:
== Changelog ==
= 1.9.11 =
* cleaned up code after 1.9.10 release
= 1.9.10 =
* fixed XSS vulnerability: removed support for date-options as shortcode attribute completely - to mitigate an XSS vulnerability where authenticated attackers with contributor permission could insert malicious JavaScript (still can be set as constant in PHP code)