v3.0.50

What's Changed

• French lang file update by @f14m07 in #947
• Sanitize superglobal reads with WP-style functions (batch 1) by @TommsNL in #946
• Fix translation escaping in welcome notice, convert QuickTags inline script by @TommsNL in #948
• Fix OutputNotEscaped: eme_esc_html() + unescaped __() in output by @TommsNL in #949
• Fix remaining output escaping: _e(), htmlspecialchars, variables, non-HTML output by @TommsNL in #950
• Fix all remaining PCP errors in root files (issue #919) by @TommsNL in #951

Full Changelog: v3.0.49...v3.0.50

v3.0.49

What's Changed

• French lang file update by @f14m07 in #939
• Add phpcs:ignore for trusted eme_ui_select() output by @TommsNL in #940
• Add phpcs:ignore for UI helpers & wp_nonce_field, fix canonical URL escaping by @TommsNL in #941
• Use esc_attr for values in HTML attribute contexts by @TommsNL in #942
• Add $wpdb->prepare() for small admin files (batch 1) by @TommsNL in #943
• Add $wpdb->prepare() and phpcs:ignore for all remaining files (batch 2) by @TommsNL in #944
• Parameterize 4 remaining IN clauses in eme-rsvp.php by @TommsNL in #945

Full Changelog: v3.0.48...v3.0.49

v3.0.48

What's Changed

• French lang file update by @f14m07 in #933
• Late escaping batch 3: esc_attr/wp_kses_post/checked() across 10 files by @TommsNL in #929
• Late escaping batch 4: complete remaining admin output escaping by @TommsNL in #934
• esc_url() for template URLs, ABSPATH guards, prefix CLI functions by @TommsNL in #935
• Replace eme_trans_esc_html() with WP escaping, wrap admin_url() in esc_url() by @TommsNL in #936
• Wrap translations with esc_attr in attributes, esc_html in link text by @TommsNL in #937

Full Changelog: v3.0.47...v3.0.48

v3.0.47

Full Changelog: v3.0.46...v3.0.47

v3.0.46

Full Changelog: v3.0.45...v3.0.46

v3.0.45

What's Changed

• Late escaping batch 2: 6 admin files by @TommsNL in #926

Full Changelog: v3.0.44...v3.0.45

v3.0.44

Full Changelog: v3.0.43...v3.0.44

v3.0.43

Full Changelog: v3.0.42...v3.0.43

v3.0.42

Full Changelog: v3.0.41...v3.0.42

v3.0.41

What's Changed

• Add per-action nonce verification to admin GET handlers (CSRF fix) by @TommsNL in #923
• Add late escaping to 5 admin page files (WP Store readiness) by @TommsNL in #924
• Fix $message escaping: use nl2br(esc_html()) pattern by @TommsNL in #925

Full Changelog: v3.0.40...v3.0.41