💦 FULL SET: Changeset/ - High Quality

Changeset 3044671


Ignore:
Timestamp:
03/04/2024 01:37:44 AM (22 months ago)
Author:
info2000
Message:

Security fixes: addressed XSS vulnerabilities, version 3.1.2

Location:
adsensei-b30/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • adsensei-b30/trunk/adSenseiB30.php

    r2963273 r3044671  
    55  Plugin URI: https://adsplugin.net
    66  Description: Inserta de manera fácil, rápida y flexible anuncios de AdSense por todo tu blog
    7   Version: 3.1.2
     7  Version: 3.1.3
    88  Author: <a href="https://adsplugin.net" target="_blank">José Fernandez</a>
    99  License: GPLv2 or later
  • adsensei-b30/trunk/includes/admin/admin-actions.php

    r2921235 r3044671  
    7878function adsensei_save_vi_token() {
    7979    global $adsensei_options;
    80 
    81     if (empty($_POST['token'])) {
    82         echo json_encode(array("status" => "failed"));
     80   
     81    if (empty($_POST['token']) || !is_string($_POST['token'])) {
     82        echo json_encode(array("status" => "failed", "error" => "Invalid token format"));
    8383        wp_die();
    84     }
    85 
     84      }
     85    $token = esc_html($_POST['token']);
    8686    // Save token before trying to create ads.txt
    87     update_option('adsensei_vi_token', $_POST['token']);
     87    update_option('adsensei_vi_token', $token );
    8888
    8989    if (!isset($adsensei_options['adsTxtEnabled'])) {
     
    9191        delete_transient('adsensei_vi_ads_txt_error');
    9292        delete_transient('adsensei_vi_ads_txt_notice');
    93         echo json_encode(array("status" => "success", "token" => $_POST['token'], "adsTxt" => 'disabled'));
     93        echo json_encode(array("status" => "success", "token" => $token, "adsTxt" => 'disabled'));
    9494        wp_die();
    9595    }
     
    111111
    112112    //sleep(5);
    113     echo json_encode(array("status" => "success", "token" => $_POST['token']));
     113    echo json_encode(array("status" => "success", "token" => $token));
    114114    wp_die();
    115115}
  • adsensei-b30/trunk/readme.txt

    r2927215 r3044671  
    33Requires at least: 3.6+
    44Tested up to: 6.2.2
    5 Stable tag: 3.1.0
     5Stable tag: 3.1.3
    66License: GPLv3
    77License URI: http://www.gnu.org/licenses/gpl-3.0.html
     
    5555
    5656== Changelog ==
     57= 3.1.3 =
     58* Resolvemos vulnerabilidad XSS.
    5759= 3.1.0 =
    5860* Agregamos opción para migrar los adsense a la nueva versión
Note: See TracChangeset for help on using the changeset viewer.