Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/manually-build-zip.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
with:
type: 'zip'
filename: 'passwp-posts.zip'
exclusions: '*.git* .editorconfig composer* *.md package.json package-lock.json'
exclusions: '*.git* .editorconfig *.md package.json package-lock.json'

- name: Release
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda #v2
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/on-release-add.zip.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
with:
type: 'zip'
filename: 'passwp-posts.zip'
exclusions: '*.git* .editorconfig composer* *.md package.json package-lock.json'
exclusions: '*.git* .editorconfig *.md package.json package-lock.json'

- name: Release
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda #v2
Expand Down
14 changes: 13 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
@@ -1,6 +1,18 @@
# Dependencies
/node_modules/
/vendor/

# Vendor - include production, exclude dev
/vendor/antecedent/
/vendor/bin/
/vendor/brain/
/vendor/hamcrest/
/vendor/mockery/
/vendor/myclabs/
/vendor/nikic/
/vendor/phar-io/
/vendor/phpunit/
/vendor/sebastian/
/vendor/theseer/

# Build outputs
/coverage/
Expand Down
13 changes: 13 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

## [1.1.1] - 2024-12-15

### Fixed

- Fatal error when Plugin Update Checker library is not available (added class_exists check)
- Namespace error in password form template (PassWP_Posts vs PassWP\Posts)
- JavaScript XSS vulnerabilities with proper URL and HTML escaping in customize.js
- CUSTOMIZE_DEFAULTS field names aligned with template expectations

### Added

- Production vendor files (yahnis-elsts/plugin-update-checker) included in repository

## [1.1.0] - 2024-12-15

### Added
Expand Down
5 changes: 5 additions & 0 deletions includes/class-github-plugin-updater.php
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,11 @@ public function __construct( $config = array() ) {
* Set up the update checker using GitHub integration
*/
public function setup_updater() {
// Check if the Plugin Update Checker library is available.
if ( ! class_exists( PucFactory::class ) ) {
return;
}

try {
$update_checker = PucFactory::buildUpdateChecker(
$this->github_url,
Expand Down
Loading