Skip to content

Commit 5235ddd

Browse files
easycodereasycoder
authored
Merge pull request #248 from easycoder/dev
Various updates
2 parents 9ef1f64 + 2da264f commit 5235ddd

File tree

10 files changed

+19
-10
lines changed

10 files changed

+19
-10
lines changed

‎dist/easycoder-min.js

Lines changed: 4 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/easycoder.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8511,7 +8511,7 @@ const EasyCoder = {
85118511
}
85128512
},
85138513
};
8514-
EasyCoder.version = `2.7.5`;
8514+
EasyCoder.version = `2.7.6`;
85158515
EasyCoder.timestamp = Date.now();
85168516
console.log(`EasyCoder loaded; waiting for page`);
85178517

‎dist/easycoder.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
* Plugin Name: EasyCoder
44
* Plugin URI: https://easycoder.software
55
* Description: Control the appearance and behavior of your posts and pages by embedding simple English-like scripts, without the need to learn JavaScript.
6-
* Version: 2.7.5
6+
* Version: 2.7.6
77
* Author: EasyCoder Software
88
* Author URI: https://easycoder.software
99
*/
@@ -16,7 +16,7 @@
1616
add_action('wp_enqueue_scripts', 'easycoder_enqueue_script', 2);
1717
function easycoder_enqueue_script() {
1818
wp_enqueue_script('easycoder_script',
19-
'https://cdn.jsdelivr.net/gh/easycoder/easycoder.github.io/dist/easycoder.js', array(), '2.7.5');
19+
'https://cdn.jsdelivr.net/gh/easycoder/easycoder.github.io/dist/easycoder.js', array(), '2.7.6');
2020
}
2121

2222
// Set up default plugin and REST scripts

‎dist/readme.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,9 @@ For tutorials and a programmers' reference see our [EasyCoder Software Codex](ht
5454

5555
== Changelog ==
5656

57+
= 2.7.6 23-feb 2021 =
58+
* Fix security vulnerability. Thanks to Brett Caldwell, buckshotbrett@gmail.com
59+
5760
= 2.7.5 02-dec 2020 =
5861
* Fix a bug in the code to detect module running
5962

‎dist/rest.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -246,6 +246,7 @@
246246
// Endpoint: {site root}/wp-content/plugins/easycoder/rest.php/_thumb
247247
header("Content-Type: application/json");
248248
$value = stripslashes(file_get_contents("php://input"));
249+
$value = str_replace( array("&", "|", ";"), '', $value);
249250
$json = json_decode($value);
250251
$source = "../../../$resources/" . str_replace('~', '/', $json->source);
251252
$dest = "../../../$resources/" . str_replace('~', '/', $json->dest);

‎js/easycoder/EasyCoder.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
EasyCoder.version = `2.7.5`;
1+
EasyCoder.version = `2.7.6`;
22
EasyCoder.timestamp = Date.now();
33
console.log(`EasyCoder loaded; waiting for page`);
44

‎resources/md/home.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,4 +28,4 @@ Also look at some of our examples (/SIDEBAR/). These are complete web pages you
2828

2929
After that it's time to add an ~ec~ script to your web page. The links /SIDEBAR/ include examples that should help you understand what you need to add to your website. If you need further help you can contact us in our [Slack](https://easycoder-software.slack.com/) channel. Don't be afraid to ask; everybody was a beginner once.
3030

31-
All of the source code of this website can be found in the [EasyCoder Repository](https:github.com/easycoder/easycoder.github.io).
31+
All of the source code of this website can be found in the [EasyCoder Repository](https://github.com/easycoder/easycoder.github.io).

‎server/easycoder.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
* Plugin Name: EasyCoder
44
* Plugin URI: https://easycoder.software
55
* Description: Control the appearance and behavior of your posts and pages by embedding simple English-like scripts, without the need to learn JavaScript.
6-
* Version: 2.7.5
6+
* Version: 2.7.6
77
* Author: EasyCoder Software
88
* Author URI: https://easycoder.software
99
*/
@@ -16,7 +16,7 @@
1616
add_action('wp_enqueue_scripts', 'easycoder_enqueue_script', 2);
1717
function easycoder_enqueue_script() {
1818
wp_enqueue_script('easycoder_script',
19-
'https://cdn.jsdelivr.net/gh/easycoder/easycoder.github.io/dist/easycoder.js', array(), '2.7.5');
19+
'https://cdn.jsdelivr.net/gh/easycoder/easycoder.github.io/dist/easycoder.js', array(), '2.7.6');
2020
}
2121

2222
// Set up default plugin and REST scripts

‎server/readme.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,9 @@ For tutorials and a programmers' reference see our [EasyCoder Software Codex](ht
5454

5555
== Changelog ==
5656

57+
= 2.7.6 23-feb 2021 =
58+
* Fix security vulnerability. Thanks to Brett Caldwell, buckshotbrett@gmail.com
59+
5760
= 2.7.5 02-dec 2020 =
5861
* Fix a bug in the code to detect module running
5962

‎server/rest.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -246,6 +246,7 @@
246246
// Endpoint: {site root}/wp-content/plugins/easycoder/rest.php/_thumb
247247
header("Content-Type: application/json");
248248
$value = stripslashes(file_get_contents("php://input"));
249+
$value = str_replace( array("&", "|", ";"), '', $value);
249250
$json = json_decode($value);
250251
$source = "../../../$resources/" . str_replace('~', '/', $json->source);
251252
$dest = "../../../$resources/" . str_replace('~', '/', $json->dest);

0 commit comments

Comments
 (0)