1.0.9

• Try fix issue with current_user_can check in pre_kses when SECURE_AUTH_COOKIE isn't defined.

1.0.8

• Try fix potential issue with current_user_can check when WP pluggable functions aren't loaded.

1.0.7

• Security update: users without unfiltered_html capability can no longer add attributes. When a user without the capability updates a post all existing attributes are stripped. Issue discovered by Francesco Carlucci (CVE ID: CVE-2024-8318, CVSS Severity Score: 6.4 (Medium)). The vulnerability made it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accessed an injected page.
• Tested up to WordPress 6.6.
• Update @wordpress/* packages.

1.0.6

• Tested up to WordPress 6.5.
• Fix PHP notice when rendering a block that doesn't have any attributes.
• Update @wordpress/* packages.

1.0.5

• Use WP_HTML_Tag_Processor for adding HTML attributes.
• Remove afb_sanitize_attribute_key and afb_sanitize_attribute_value filters (now handled by WP_HTML_Tag_Processor).
• Use render_block filter to apply attributes instead of overriding block's render_callback.
• Move all PHP code to main file for simplicity.
• Add $attribute param to afb_attribute_separator filter.
• Remove uppercase text transform from attribute input labels, use monospace font for value.
• Add button to edit attributes in a modal for more space.
• Update @wordpress/* packages.
• Regression: for blocks that render multiple root elements attributes are only applied to the first one.

1.0.4

• Add afb_sanitize_attribute_key and afb_sanitize_attribute_value filters.
• Catch errors when using invalid characters in attribute name/value.
• Update @wordpress/* packages.

1.0.3

• Update @wordpress/* packages.
• Test with WordPress 6.0.
• Convert advanced style attribute editor to TypeScript and refactor.
• Fix duplicate attribute values being output when the block has both JS and PHP render functions.
• Add GitHub link.
• Remove src folder from plugin.

1.0.2

• Add advanced editor for style attribute.
• Remove jQuery (#1).

1.0.1

• Fix special character encoding for dynamic blocks.

1.0.0

Add plugin