Data Tables Generator by Supsystic - Version 1.10.20

Version Description

Download this release

Release Info

Developer supsystic.com
Plugin Icon 128x128 Data Tables Generator by Supsystic
Version 1.10.20
Comparing to
See all releases

Code changes from version 1.10.19 to 1.10.20

app/SupsysticTables.php CHANGED
@@ -18,7 +18,7 @@ class SupsysticTables
18
 
19
  $menuSlug = 'supsystic-tables';
20
  $pluginPath = dirname(dirname(__FILE__));
21
- $environment = new Rsc_Environment('st', '1.10.19', $pluginPath);
22
 
23
  /* Configure */
24
  $environment->configure(
18
 
19
  $menuSlug = 'supsystic-tables';
20
  $pluginPath = dirname(dirname(__FILE__));
21
+ $environment = new Rsc_Environment('st', '1.10.20', $pluginPath);
22
 
23
  /* Configure */
24
  $environment->configure(
index.php CHANGED
@@ -4,7 +4,7 @@
4
  * Plugin Name: Data Tables Generator by Supsystic
5
  * Plugin URI: http://supsystic.com
6
  * Description: Create and manage beautiful data tables with custom design. No HTML knowledge is required
7
- * Version: 1.10.19
8
  * Author: supsystic.com
9
  * Author URI: http://supsystic.com
10
  * Text Domain: supsystic_tables
4
  * Plugin Name: Data Tables Generator by Supsystic
5
  * Plugin URI: http://supsystic.com
6
  * Description: Create and manage beautiful data tables with custom design. No HTML knowledge is required
7
+ * Version: 1.10.20
8
  * Author: supsystic.com
9
  * Author URI: http://supsystic.com
10
  * Text Domain: supsystic_tables
readme.txt CHANGED
@@ -5,7 +5,7 @@ Plugin URI: https://supsystic.com/plugins/data-tables-generator-plugin/
5
  Donate link: https://supsystic.com/plugins/data-tables-generator-plugin/
6
  Tags: data table, spreadsheet, table builder, charts, graphs, wordpress table plugin, excel, line chart, pie chart, visualise data
7
  Tested up to: 6.0
8
- Stable tag: 1.10.19
9
 
10
  Create data tables with charts and graphs. Custom design, navigation, searching and ordering functions. Export to PDF, CSV, Print. Excel spreadsheet. WooCommerce Integration.
11
 
@@ -217,6 +217,9 @@ It's perfect for product [Price List](http://woo.supsystic.com/price-list "Price
217
  Create custom order forms which increase your conversion rate!
218
 
219
  == Changelog ==
 
 
 
220
  1.10.19 /17.06.2022 =
221
  * Fixes for Installation
222
 
5
  Donate link: https://supsystic.com/plugins/data-tables-generator-plugin/
6
  Tags: data table, spreadsheet, table builder, charts, graphs, wordpress table plugin, excel, line chart, pie chart, visualise data
7
  Tested up to: 6.0
8
+ Stable tag: 1.10.20
9
 
10
  Create data tables with charts and graphs. Custom design, navigation, searching and ordering functions. Export to PDF, CSV, Print. Excel spreadsheet. WooCommerce Integration.
11
 
217
  Create custom order forms which increase your conversion rate!
218
 
219
  == Changelog ==
220
+ 1.10.20 /19.06.2022 =
221
+ * XSS security fix
222
+
223
  1.10.19 /17.06.2022 =
224
  * Fixes for Installation
225
 
src/SupsysticTables/Tables/Controller.php CHANGED
@@ -425,8 +425,10 @@ class SupsysticTables_Tables_Controller extends SupsysticTables_Core_BaseControl
425
 
426
  parse_str($data, $settings);
427
 
 
 
428
  try {
429
- $this->getEnvironment()->getModule('tables')->setIniLimits();
430
  $this->getModel('tables')->set($id, array('settings' => htmlspecialchars(serialize($settings), ENT_QUOTES)));
431
  } catch (Exception $e) {
432
  return $this->ajaxError($e->getMessage());
425
 
426
  parse_str($data, $settings);
427
 
428
+ $settings = $this->getModel('tables')->sanitize_array($settings);
429
+
430
  try {
431
+ $this->getEnvironment()->getModule('tables')->setIniLimits();
432
  $this->getModel('tables')->set($id, array('settings' => htmlspecialchars(serialize($settings), ENT_QUOTES)));
433
  } catch (Exception $e) {
434
  return $this->ajaxError($e->getMessage());
src/SupsysticTables/Tables/Model/Tables.php CHANGED
@@ -259,6 +259,17 @@ class SupsysticTables_Tables_Model_Tables extends SupsysticTables_Core_BaseModel
259
  return false;
260
  }
261
 
 
 
 
 
 
 
 
 
 
 
 
262
  public function sanitizeString($str) {
263
  $allowedHtml = $this->getAllowedHtml();
264
  if (!empty($str) && is_string($str)) {
259
  return false;
260
  }
261
 
262
+ public function sanitize_array( &$array ) {
263
+ foreach ($array as $key => &$value) {
264
+ if( !is_array($value) ) {
265
+ $value = $this->sanitizeString($value);
266
+ } else {
267
+ self::sanitize_array($value);
268
+ }
269
+ }
270
+ return $array;
271
+ }
272
+
273
  public function sanitizeString($str) {
274
  $allowedHtml = $this->getAllowedHtml();
275
  if (!empty($str) && is_string($str)) {