Merge branch 'next-release' into wpml-heading

brainstormforce · Jul 10, 2024 · 932c146 · 932c146
2 parents 6063e0b + a86262c
commit 932c146
Show file tree

Hide file tree

Showing 8 changed files with 15 additions and 11 deletions.
diff --git a/README.md b/README.md
@@ -3,8 +3,8 @@
 **Donate link:** https://www.paypal.me/BrainstormForce  
 **Tags:** beaver builder, beaver builder free, beaver addons, beaver builder addon, beaver builder add ons, beaver builder lite, beaver builder modules, beaver builder addons, beaver builder extensions, beaver addon, beaver builder plugin, beaver builder wordpress  
 **Requires at least:** 4.6  
-**Tested up to:** 6.5  
-**Stable tag:** 1.5.8  
+**Tested up to:** 6.6  
+**Stable tag:** 1.5.9  
 **License:** GPLv2 or later  
 **License URI:** https://www.gnu.org/licenses/gpl-2.0.html  
 
@@ -217,6 +217,7 @@ Yes it is! This plugin comes with .po and .mo files. It is already translated in
 
 ### 1.5.9 ###
 * Improvement: WPML compatibility for the Heading and Ribbon module.
+* Improvement: Improved codebase for improved security.
 
 ### 1.5.8 ###
 * Improvement: This update addressed a security bug. Props to Patchstack for privately reporting it to our team.

diff --git a/bb-ultimate-addon.php b/bb-ultimate-addon.php
@@ -3,7 +3,7 @@
  * Plugin Name: Ultimate Addons for Beaver Builder - Lite
  * Plugin URI: http://www.ultimatebeaver.com/
  * Description: Ultimate Addons is a free extension for Beaver Builder that adds 10 modules, and works on top of any Beaver Builder Package. (Free, Standard, Pro & Agency) You can use it with on any WordPress theme.
- * Version: 1.5.8
+ * Version: 1.5.9
  * Author: Brainstorm Force
  * Author URI: http://www.brainstormforce.com
  * Text Domain: uabb
@@ -18,7 +18,7 @@
 
 	define( 'BB_ULTIMATE_ADDON_DIR', plugin_dir_path( __FILE__ ) );
 	define( 'BB_ULTIMATE_ADDON_URL', plugins_url( '/', __FILE__ ) );
-	define( 'BB_ULTIMATE_ADDON_LITE_VERSION', '1.5.8' );
+	define( 'BB_ULTIMATE_ADDON_LITE_VERSION', '1.5.9' );
 	define( 'BSF_REMOVE_UABB_FROM_REGISTRATION_LISTING', true );
 	define( 'BB_ULTIMATE_ADDON_FILE', trailingslashit( dirname( __FILE__ ) ) . 'bb-ultimate-addon.php' );// @codingStandardsIgnoreLine.
 	define( 'BB_ULTIMATE_ADDON_LITE', true );

diff --git a/modules/image-icon/includes/frontend.php b/modules/image-icon/includes/frontend.php
@@ -12,7 +12,7 @@
 	<?php if ( 'icon' == $settings->image_type ) { ?>
 		<span class="uabb-icon-wrap">
 			<span class="uabb-icon">
-				<i class="<?php echo $settings->icon; ?>"></i>
+				<i class="<?php echo esc_attr($settings->icon); ?>"></i>
 			</span>
 		</span>
 	<?php } // Icon Html End. ?>
@@ -30,7 +30,7 @@
 		?>
 		" itemscope itemtype="http://schema.org/ImageObject">
 			<div class="uabb-image-content">
-				<img class="<?php echo $classes; ?>" src="<?php echo $src; ?>" alt="<?php echo $alt; ?>" itemprop="image"/>
+				<img class="<?php echo $classes; ?>" src="<?php echo esc_url($src); ?>" alt="<?php echo esc_attr($alt); ?>" itemprop="image"/>
 			</div>
 		</div>
 

diff --git a/modules/image-separator/includes/frontend.php b/modules/image-separator/includes/frontend.php
@@ -19,6 +19,6 @@
 		echo ' uabb-image-crop-' . $settings->image_style;}
 	?>
 	" itemscope itemtype="http://schema.org/ImageObject">
-		<img class="<?php echo $classes; ?> <?php echo ( '0' == $settings->img_animation_repeat ) ? 'infinite' : ''; ?>" src="<?php echo $src; ?>" alt="<?php echo $alt; ?>" itemprop="image"/>
+		<img class="<?php echo $classes; ?> <?php echo ( '0' == $settings->img_animation_repeat ) ? 'infinite' : ''; ?>" src="<?php echo esc_url($src); ?>" alt="<?php echo esc_attr($alt); ?>" itemprop="image"/>
 	</div>
 </div>
diff --git a/modules/uabb-heading/uabb-heading-bb-2-2-compatibility.php b/modules/uabb-heading/uabb-heading-bb-2-2-compatibility.php
@@ -315,6 +315,7 @@
 							'type'    => 'select',
 							'label'   => __( 'HTML Tag', 'uabb' ),
 							'default' => 'h3',
+							'sanitize' => array( 'FLBuilderUtils::esc_tags', 'h3' ),
 							'options' => array(
 								'h1' => 'h1',
 								'h2' => 'h2',

diff --git a/modules/uabb-heading/uabb-heading-bb-less-than-2-2-compatibility.php b/modules/uabb-heading/uabb-heading-bb-less-than-2-2-compatibility.php
@@ -325,6 +325,7 @@
 							'type'    => 'select',
 							'label'   => __( 'HTML Tag', 'uabb' ),
 							'default' => 'h3',
+							'sanitize' => array( 'FLBuilderUtils::esc_tags', 'h3' ),
 							'options' => array(
 								'h1' => 'h1',
 								'h2' => 'h2',

diff --git a/modules/uabb-star-rating/includes/frontend.php b/modules/uabb-star-rating/includes/frontend.php
@@ -14,7 +14,7 @@
 <?php
 if ( 'bottom' === $settings->star_position ) {
 	?>
-	<div class="uabb-rating-title"><?php echo $title; ?></div>
+	<div class="uabb-rating-title"><?php echo esc_html($title); ?></div>
 	<?php
 }
 ?>
@@ -47,7 +47,7 @@
 <?php
 if ( 'top' === $settings->star_position ) {
 	?>
-	<div class="uabb-rating-title"><?php echo $title; ?></div>
+	<div class="uabb-rating-title"><?php echo esc_html($title); ?></div>
 	<?php
 }
 ?>

diff --git a/readme.txt b/readme.txt
@@ -3,8 +3,8 @@ Contributors: brainstormforce
 Donate link: https://www.paypal.me/BrainstormForce
 Tags: beaver builder, beaver builder free, beaver addons, beaver builder addon, beaver builder add ons, beaver builder lite, beaver builder modules, beaver builder addons, beaver builder extensions, beaver addon, beaver builder plugin, beaver builder wordpress
 Requires at least: 4.6
-Tested up to: 6.5
-Stable tag: 1.5.8
+Tested up to: 6.6
+Stable tag: 1.5.9
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -217,6 +217,7 @@ Yes it is! This plugin comes with .po and .mo files. It is already translated in
 
 = 1.5.9 = 
 * Improvement: WPML compatibility for the Heading and Ribbon module.
+* Improvement: Improved codebase for improved security.
 
 = 1.5.8 = 
 * Improvement: This update addressed a security bug. Props to Patchstack for privately reporting it to our team.