Skip to content

1.4.4

Latest

Choose a tag to compare

@PaulArgoud PaulArgoud released this 08 Feb 01:36

Consistency

  • Unescaped $interrupted_offset in resume form: get_option('wc_tax_retrofit_current_offset') output was interpolated directly in an HTML hidden input value attribute without intval(). Internal integer with no user input path, but inconsistent with the systematic escaping applied in v1.4.2. Fixed with intval()
  • Unescaped $checked in status checkboxes: hardcoded 'checked' / '' string output without esc_attr() in the subscription status fieldset, while the adjacent $status_key was already escaped. Fixed with esc_attr()