Skip to content

Conversation

@soderlind
Copy link
Owner

This pull request delivers a minor version update (v1.1.1) for the PassWP Posts plugin, primarily focused on bug fixes, improved security, and enhanced reliability. The update addresses fatal errors and namespace issues, patches XSS vulnerabilities, aligns configuration fields, and includes necessary vendor files for production. It also updates translation files and minor workflow exclusions.

Bug Fixes and Security Improvements:

  • Added a class_exists check for PucFactory in class-github-plugin-updater.php to prevent fatal errors when the Plugin Update Checker library is missing.
  • Fixed namespace error in the password form template and resolved JavaScript XSS vulnerabilities by ensuring proper URL and HTML escaping in customize.js.
  • Aligned CUSTOMIZE_DEFAULTS field names with template expectations for better consistency.

Dependency and Vendor Management:

  • Included production vendor files (yahnis-elsts/plugin-update-checker) in the repository for improved reliability.

Localization and Documentation:

  • Updated translation template and Norwegian Bokmål (nb_NO) translation files to reflect new/changed strings and line references. [1] [2] [3] [4]

Workflow Adjustments:

  • Minor update to GitHub Actions workflow zip exclusions, removing composer* from the exclusion list. [1] [2]

- Update .gitignore to include production vendor files
- Exclude dev dependencies (phpunit, brain/monkey, mockery, etc.)
- Add class_exists check for PucFactory in GitHub_Plugin_Updater
- Updated version number in package.json, passwp-posts.php, and readme.txt to 1.1.1.
- Added changelog entries for version 1.1.1:
  - Fixed fatal error when Plugin Update Checker library is not available.
  - Fixed namespace error in password form template.
  - Addressed JavaScript XSS vulnerabilities with proper URL and HTML escaping.
  - Aligned CUSTOMIZE_DEFAULTS field names with template expectations.
  - Included production vendor files in the repository.
@soderlind soderlind merged commit 217f66a into main Dec 15, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants