v1.4.2 - Escape vulnerable content

commit 9282fb961ae5c305268c2898a4ff6e63d8045de0 Author: Joe Hawes <[email protected]> Date: Mon Dec 9 12:06:11 2024 -0800 Readme & Version number update commit c4dcee2a7603daeaee9b5e7a926459b858d57ec6 Author: Joe Hawes <[email protected]> Date: Mon Dec 9 12:01:44 2024 -0800 Escape content commit d2a3194ca1af4f57178d5ff48bafeb00cae17cec Author: Joe Hawes <[email protected]> Date: Mon Dec 9 11:59:14 2024 -0800 Prettify
OpenGIS · Dec 9, 2024 · caaefe1 · caaefe1
1 parent 14efd7f
commit caaefe1
Show file tree

Hide file tree

Showing 15 changed files with 425 additions and 421 deletions.
diff --git a/Waymark.php b/Waymark.php
@@ -4,7 +4,7 @@
 Plugin Name: Waymark
 Plugin URI: https://www.waymark.dev/
 Description: Mapping with WordPress made easy. With Waymark enabled, click on the "Maps" link in the sidebar to create and edit Maps. Once you are happy with your Map, copy the Waymark shortcode and add it to your content.
-Version: 1.4.1
+Version: 1.4.2
 Text Domain: waymark
 Author: Joe Hawes
 Author URI: https://www.morehawes.ca/

diff --git a/inc/Admin/Waymark_Settings.php b/inc/Admin/Waymark_Settings.php
diff --git a/inc/Waymark_Config.php b/inc/Waymark_Config.php
@@ -11,7 +11,7 @@ public static function init() {
 			'plugin_name' => 'Waymark',
 			'plugin_name_short' => 'Waymark',
 			'custom_types' => [],
-			'plugin_version' => '1.4.1',
+			'plugin_version' => '1.4.2',
 			'nonce_string' => 'Waymark_Nonce',
 			'site_url' => 'https://www.waymark.dev/',
 			'directory_url' => 'https://wordpress.org/support/plugin/waymark/',

diff --git a/languages/waymark-en_CA.po b/languages/waymark-en_CA.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-18 00:24:31+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:12-0800\n"

diff --git a/languages/waymark-en_GB.po b/languages/waymark-en_GB.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-18 00:24:31+00:00\n"
 "PO-Revision-Date: 2024-01-23 08:47-0800\n"

diff --git a/languages/waymark-es_ES.po b/languages/waymark-es_ES.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-18 00:24:31+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:19-0800\n"

diff --git a/languages/waymark-fr_CA.po b/languages/waymark-fr_CA.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-18 00:24:31+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:17-0800\n"

diff --git a/languages/waymark-ja_JP.po b/languages/waymark-ja_JP.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-23 14:32:30+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:42-0800\n"

diff --git a/languages/waymark-sv_SE.po b/languages/waymark-sv_SE.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-18 00:24:31+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:18-0800\n"

diff --git a/languages/waymark-uk_UA.po b/languages/waymark-uk_UA.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-18 00:24:31+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:18-0800\n"

diff --git a/languages/waymark-zh_CN.po b/languages/waymark-zh_CN.po
@@ -2,7 +2,7 @@
 # This file is distributed under the GPLv2.
 msgid ""
 msgstr ""
-"Project-Id-Version: Waymark 1.4.1\n"
+"Project-Id-Version: Waymark 1.4.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
 "POT-Creation-Date: 2024-01-23 14:32:30+00:00\n"
 "PO-Revision-Date: 2024-01-23 10:25-0800\n"

diff --git a/languages/waymark.pot b/languages/waymark.pot
@@ -4,7 +4,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Waymark 1.4.1\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/waymark\n"
-"POT-Creation-Date: 2024-06-13 18:49:59+00:00\n"
+"POT-Creation-Date: 2024-12-09 20:02:54+00:00\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=utf-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1256,11 +1256,11 @@ msgstr ""
 msgid "Settings Data"
 msgstr ""
 
-#: inc/Admin/Waymark_Settings.php:1565
+#: inc/Admin/Waymark_Settings.php:1561
 msgid "Settings Updated"
 msgstr ""
 
-#: inc/Admin/Waymark_Settings.php:1568
+#: inc/Admin/Waymark_Settings.php:1564
 msgid "Action Complete"
 msgstr ""
 

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "Waymark",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Waymark for WordPress",
   "author": "Joe Hawes",
   "main": "Gruntfile.js",

diff --git a/readme.md b/readme.md
@@ -4,7 +4,7 @@
 **Requires at least:** 4.6  
 **Tested up to:** 6.7  
 **Requires PHP:** 5.2  
-**Stable tag:** 1.4.1  
+**Stable tag:** 1.4.2  
 **License:** GPLv2 or later  
 **License URI:** http://www.gnu.org/licenses/gpl-2.0.html  
 
@@ -191,6 +191,10 @@ Built on the shoulders of giants, [thank you](https://www.waymark.dev/docs/thank
 
 ## Changelog ##
 
+### 1.4.2 ###
+
+Fixed a vulnerability where content output to the browser was not being escaped. Thanks to vgo0 for reporting this via Wordfence.
+
 ### 1.4.1 ###
 
 - Sleep message fix, thanks to [jiem31](https://wordpress.org/support/users/jiem31/) for [reporting this](https://wordpress.org/support/topic/a-few-ways-for-improvement/).

diff --git a/readme.txt b/readme.txt
@@ -4,7 +4,7 @@ Tags: GIS, Map maker, GPX, Track, Elevation
 Requires at least: 4.6
 Tested up to: 6.7
 Requires PHP: 5.2
-Stable tag: 1.4.1
+Stable tag: 1.4.2
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
@@ -173,6 +173,10 @@ Built on the shoulders of giants, [thank you](https://www.waymark.dev/docs/thank
 
 == Changelog ==
 
+= 1.4.2 =
+
+Fixed a vulnerability where content output to the browser was not being escaped. Thanks to vgo0 for reporting this via Wordfence.
+
 = 1.4.1 =
 
 - Sleep message fix, thanks to [jiem31](https://wordpress.org/support/users/jiem31/) for [reporting this](https://wordpress.org/support/topic/a-few-ways-for-improvement/).