Changeset 2088993

Timestamp:

05/16/2019 09:39:41 AM (5 years ago)

Author:

valendesigns

Message:

Committing 2.7.2 to trunk

Location:

option-tree/trunk

Files:

• composer.json (modified) (1 diff)
• includes/ot-functions-admin.php (modified) (1 diff)
• ot-loader.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)

option-tree/trunk/composer.json

@@ -2 +2 @@
   "name": "valendesigns/option-tree",
   "description": "Theme Options UI Builder for WordPress.",
-  "version": "2.7.1",
+  "version": "2.7.",
   "type": "wordpress-plugin",
   "homepage": "https://github.com/valendesigns/option-tree",

option-tree/trunk/includes/ot-functions-admin.php

@@ -564 +564 @@
             }
         } elseif ( in_array( $type, array( 'css', 'javascript', 'text', 'textarea', 'textarea-simple' ), true ) ) {
-            $filter = function( $tags, $context ) {
-                if ( 'post' === $context ) {
-                    if ( current_user_can( 'unfiltered_html' ) || true === OT_ALLOW_UNFILTERED_HTML ) {
-                        $tags['script']   = array_fill_keys( array( 'async', 'charset', 'defer', 'src', 'type' ), 1 );
-                        $tags['style']    = array_fill_keys( array( 'media', 'type' ), 1 );
-                        $tags['iframe']   = array_fill_keys( array( 'align', 'frameborder', 'height', 'longdesc', 'marginheight', 'marginwidth', 'name', 'sandbox', 'scrolling', 'src', 'srcdoc', 'style', 'width' ), 1 );
-                        $tags['noscript'] = array();
-
-                        $tags = apply_filters( 'ot_allowed_html', $tags );
+            if ( ! function_exists( '_filter_wp_kses_post' ) ) {
+                /**
+                 * Filter the allowed HTML and safe CSS styles.
+                 *
+                 * @since 2.7.2
+                 *
+                 * @param bool $add Whether to add or remove the filter.
+                 */
+                function _filter_wp_kses_post( $add = true ) {
+                    $css_filter = function ( $attr ) {
+                        array_push( $attr, 'display', 'visibility' );
+
+                        $attr = apply_filters( 'ot_safe_style_css', $attr );
+
+                        return $attr;
+                    };
+
+                    $html_filter = function ( $tags, $context ) {
+                        if ( 'post' === $context ) {
+                            if ( current_user_can( 'unfiltered_html' ) || true === OT_ALLOW_UNFILTERED_HTML ) {
+                                $tags['script']   = array_fill_keys( array( 'async', 'charset', 'defer', 'src', 'type' ), true );
+                                $tags['style']    = array_fill_keys( array( 'media', 'type' ), true );
+                                $tags['iframe']   = array_fill_keys( array( 'align', 'allowfullscreen', 'class', 'frameborder', 'height', 'id', 'longdesc', 'marginheight', 'marginwidth', 'name', 'sandbox', 'scrolling', 'src', 'srcdoc', 'style', 'width' ), true );
+                                $tags['noscript'] = true;
+
+                                $tags = apply_filters( 'ot_allowed_html', $tags );
+                            }
+                        }
+
+                        return $tags;
+                    };
+
+                    if ( $add ) {
+                        add_filter( 'safe_style_css', $css_filter );
+                        add_filter( 'wp_kses_allowed_html', $html_filter, 10, 2 );
+                    } else {
+                        remove_filter( 'safe_style_css', $css_filter );
+                        remove_filter( 'wp_kses_allowed_html', $html_filter );
                     }
                 }
-                return $tags;
-            };
-
-            add_filter( 'wp_kses_allowed_html', $filter, 10, 2 );
+            }
+
+            _filter_wp_kses_post( true );
             $input_safe = wp_kses_post( $input );
-            remove_filter( 'wp_kses_allowed_html', $filter );
+             );
         } elseif ( 'date-picker' === $type || 'date-time-picker' === $type ) {
             if ( ! empty( $input ) && (bool) strtotime( $input ) ) {

option-tree/trunk/ot-loader.php

@@ -4 +4 @@
  * Plugin URI:  https://github.com/valendesigns/option-tree/
  * Description: Theme Options UI Builder for WordPress. A simple way to create & save Theme Options and Meta Boxes for free or premium themes.
- * Version:     2.7.1
+ * Version:     2.7.
  * Author:      Derek Herman
  * Author URI:  http://valendesigns.com
@@ -85 +85 @@
              * Current Version number.
              */
-            define( 'OT_VERSION', '2.7.1' );
+            define( 'OT_VERSION', '2.7.' );
 
             /**

option-tree/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 3.8
 Tested up to: 5.2
-Stable tag: 2.7.1
+Stable tag: 2.7.
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -127 +127 @@
 == Changelog ==
 
+
+
+
 = 2.7.1 =
 * Hotfix - Fix error cannot redeclare `_sanitize_recursive()`. props @shramee