Merge pull request #12 from WPChill/dev

1.0.14 update

.gitignore

@@ -3,5 +3,5 @@ node_modules/*
 .DS_Store
 .standard.json
 package-lock.json
-remove-footer-credit.zip
+**.zip
 .php-cs-fixer.cache

Gruntfile.js

@@ -113,7 +113,7 @@ module.exports = function( grunt ) {
 			build: {
 				options: {
 					pretty: true,                           // Pretty print file sizes when logging.
-					archive: '<%= pkg.name %>.zip'
+					archive: '<%= pkg.name %>-<%= pkg.version %>.zip'
 				},
 				expand: true,
 				cwd: 'build/',

package.json

@@ -1,7 +1,7 @@
 {
   "name": "remove-footer-credit",
   "main": "Gruntfile.js",
-  "version": "1.0.3",
+  "version": "1.0.14",
   "author": "WPChill",
   "license": "GPL v3",
   "repository": "https://github.com/WPChill/remove-footer-credit",

readme.txt

@@ -2,8 +2,8 @@
 Contributors: wpchill, silkalns
 Tags: footer, credit, change, modify, replace, remove, link, HTML, text, remove footer credit
 Requires at least: 5.9
-Tested up to: 6.2
-Stable tag: 1.0.13
+Tested up to: 6.5
+Stable tag: 1.0.14
 Requires PHP: 7.2
 License: GPLv3 or later
 
@@ -32,6 +32,9 @@ This plugin has very minimal options to keep things simple and easier to use. Yo
 
 == Changelog ==
 
+= 1.0.14 - 21.03.2024 =
+Fixed: Security issue
+
 = 1.0.13 - 24.02.2022 =
 Fixed: Replaceable text new line bug
 

remove-footer-credit.php

@@ -2,7 +2,7 @@
 /**
  * Plugin Name:             Remove Footer Credit
  * Description:             A simple plugin to remove footer credits
- * Version:                 1.0.13
+ * Version:                 1.0.14
  * Author:                  WPChill
  * Author URI:              https://wpchill.com
  * Requires:                5.2 or higher
@@ -212,6 +212,9 @@ function jabrfc_ob_call( $buffer ) // $buffer contains entire page.
 			$replace = '';
 			if ( isset( $data['replace'][ $i ] ) ) {
 				$replace = html_entity_decode( jabrfc_kses( $data['replace'][ $i ] ) );
+				if ( defined( 'DISALLOW_UNFILTERED_HTML' ) && DISALLOW_UNFILTERED_HTML ) {
+					$replace = esc_html( $replace );
+				}
 			}
 
 			// try to replace wihtout html_entity_decode.