Coming Soon Page & Maintenance Mode by SeedProd - Version 5.1.2

Version Description

  • Tweak - Escape logo and custom css fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
Download this release

Release Info

Developer seedprod
Plugin Icon 128x128 Coming Soon Page & Maintenance Mode by SeedProd
Version 5.1.2
Comparing to
See all releases

Code changes from version 5.1.1 to 5.1.2

Files changed (3) hide show
  1. README.txt +8 -2
  2. coming-soon.php +2 -2
  3. themes/default/functions.php +11 -3
README.txt CHANGED
@@ -3,8 +3,8 @@ Contributors: seedprod, smub
3
  Donate link: http://www.seedprod.com
4
  Tags: maintenance mode, coming soon page, coming soon, under construction, landing page, launch, maintenance, construction, offline, unavailable, under construction page, launch page
5
  Requires at least: 3.5.1
6
- Tested up to: 5.2
7
- Stable tag: 5.1.1
8
  Text Domain: coming-soon
9
  License: GPLv2 or later
10
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -115,6 +115,9 @@ This is always a caching issue. Go to the caching plugin's setting page and clea
115
  4. Design Page
116
 
117
  == Changelog ==
 
 
 
118
  = 5.1.1 =
119
  * Tweak - Escape script output on certain fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
120
 
@@ -239,6 +242,9 @@ This is always a caching issue. Go to the caching plugin's setting page and clea
239
  * Initial Commit
240
 
241
  == Upgrade Notice ==
 
 
 
242
  = 5.1.1 =
243
  * Tweak - Escape script output on certain fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
244
 
3
  Donate link: http://www.seedprod.com
4
  Tags: maintenance mode, coming soon page, coming soon, under construction, landing page, launch, maintenance, construction, offline, unavailable, under construction page, launch page
5
  Requires at least: 3.5.1
6
+ Tested up to: 5.4
7
+ Stable tag: 5.1.2
8
  Text Domain: coming-soon
9
  License: GPLv2 or later
10
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
115
  4. Design Page
116
 
117
  == Changelog ==
118
+ = 5.1.2 =
119
+ * Tweak - Escape logo and custom css fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
120
+
121
  = 5.1.1 =
122
  * Tweak - Escape script output on certain fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
123
 
242
  * Initial Commit
243
 
244
  == Upgrade Notice ==
245
+ = 5.1.2 =
246
+ * Tweak - Escape logo and custom css fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
247
+
248
  = 5.1.1 =
249
  * Tweak - Escape script output on certain fields: reported by security researcher (Jinson Varghese Behanan) from the company (Astra Security)
250
 
coming-soon.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: Coming Soon Page, Under Construction & Maintenance Mode by SeedProd
4
  * Plugin URI: http://www.seedprod.com
5
  * Description: The #1 Coming Soon Page, Under Construction & Maintenance Mode plugin for WordPress.
6
- * Version: 5.1.1
7
  * Author: SeedProd
8
  * Author URI: http://www.seedprod.com
9
  * Text Domain: coming-soon
@@ -20,7 +20,7 @@ define('SEED_CSP4_SHORTNAME', 'seed_csp4'); // Used to reference namespace funct
20
  define('SEED_CSP4_SLUG', 'coming-soon/coming-soon.php'); // Used for settings link.
21
  define('SEED_CSP4_TEXTDOMAIN', 'coming-soon'); // Your textdomain
22
  define('SEED_CSP4_PLUGIN_NAME', __('Coming Soon Page & Maintenance Mode by SeedProd', 'coming-soon')); // Plugin Name shows up on the admin settings screen.
23
- define('SEED_CSP4_VERSION', '5.1.1'); // Plugin Version Number. Recommend you use Semantic Versioning http://semver.org/
24
  define('SEED_CSP4_PLUGIN_PATH', plugin_dir_path(__FILE__)); // Example output: /Applications/MAMP/htdocs/wordpress/wp-content/plugins/seed_csp4/
25
  define('SEED_CSP4_PLUGIN_URL', plugin_dir_url(__FILE__)); // Example output: http://localhost:8888/wordpress/wp-content/plugins/seed_csp4/
26
  define('SEED_CSP4_TABLENAME', 'seed_csp4_subscribers');
3
  * Plugin Name: Coming Soon Page, Under Construction & Maintenance Mode by SeedProd
4
  * Plugin URI: http://www.seedprod.com
5
  * Description: The #1 Coming Soon Page, Under Construction & Maintenance Mode plugin for WordPress.
6
+ * Version: 5.1.2
7
  * Author: SeedProd
8
  * Author URI: http://www.seedprod.com
9
  * Text Domain: coming-soon
20
  define('SEED_CSP4_SLUG', 'coming-soon/coming-soon.php'); // Used for settings link.
21
  define('SEED_CSP4_TEXTDOMAIN', 'coming-soon'); // Your textdomain
22
  define('SEED_CSP4_PLUGIN_NAME', __('Coming Soon Page & Maintenance Mode by SeedProd', 'coming-soon')); // Plugin Name shows up on the admin settings screen.
23
+ define('SEED_CSP4_VERSION', '5.1.2'); // Plugin Version Number. Recommend you use Semantic Versioning http://semver.org/
24
  define('SEED_CSP4_PLUGIN_PATH', plugin_dir_path(__FILE__)); // Example output: /Applications/MAMP/htdocs/wordpress/wp-content/plugins/seed_csp4/
25
  define('SEED_CSP4_PLUGIN_URL', plugin_dir_url(__FILE__)); // Example output: http://localhost:8888/wordpress/wp-content/plugins/seed_csp4/
26
  define('SEED_CSP4_TABLENAME', 'seed_csp4_subscribers');
themes/default/functions.php CHANGED
@@ -56,7 +56,7 @@ function seed_csp4_customcss() {
56
  $output = '';
57
 
58
  if ( !empty( $custom_css ) ) {
59
- $output = '<style type="text/css">'.$custom_css.'</style>';
60
  }
61
 
62
  return $output;
@@ -270,7 +270,7 @@ function seed_csp4_logo() {
270
  $output = '';
271
 
272
  if ( !empty( $logo ) ) {
273
- $output .= "<img id='seed-csp4-image' src='$logo'>";
274
  }
275
 
276
  return $output;
@@ -283,7 +283,15 @@ function seed_csp4_headline() {
283
  $output = '';
284
 
285
  if ( !empty( $headline ) ) {
286
- $output .= '<h1 id="seed-csp4-headline">'.str_replace("script","",$headline).'</h1>';
 
 
 
 
 
 
 
 
287
  }
288
 
289
  return $output;
56
  $output = '';
57
 
58
  if ( !empty( $custom_css ) ) {
59
+ $output = '<style type="text/css">'.esc_html($custom_css).'</style>';
60
  }
61
 
62
  return $output;
270
  $output = '';
271
 
272
  if ( !empty( $logo ) ) {
273
+ $output .= "<img id='seed-csp4-image' src='".esc_attr($logo)."'>";
274
  }
275
 
276
  return $output;
283
  $output = '';
284
 
285
  if ( !empty( $headline ) ) {
286
+ $output .= '<h1 id="seed-csp4-headline">'.wp_kses($headline,array(
287
+ 'a' => array(
288
+ 'href' => array(),
289
+ 'title' => array()
290
+ ),
291
+ 'br' => array(),
292
+ 'em' => array(),
293
+ 'strong' => array(),
294
+ )).'</h1>';
295
  }
296
 
297
  return $output;