v6.5.1-rc2: * **Page Optimize** Sanitized vary value in queue list. (…

…TaiYou)
litespeedtech · Sep 24, 2024 · 69e237f · 69e237f
1 parent a37fa0a
commit 69e237f
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 5 deletions.
diff --git a/litespeed-cache.php b/litespeed-cache.php
@@ -4,7 +4,7 @@
  * Plugin Name:       LiteSpeed Cache
  * Plugin URI:        https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration
  * Description:       High-performance page caching and site optimization from LiteSpeed
- * Version:           6.5.1-rc1
+ * Version:           6.5.1-rc2
  * Author:            LiteSpeed Technologies
  * Author URI:        https://www.litespeedtech.com
  * License:           GPLv3
@@ -34,7 +34,7 @@
 	return;
 }
 
-!defined('LSCWP_V') && define('LSCWP_V', '6.5.1-rc1');
+!defined('LSCWP_V') && define('LSCWP_V', '6.5.1-rc2');
 
 !defined('LSCWP_CONTENT_DIR') && define('LSCWP_CONTENT_DIR', WP_CONTENT_DIR);
 !defined('LSCWP_DIR') && define('LSCWP_DIR', __DIR__ . '/'); // Full absolute path '/var/www/html/***/wp-content/plugins/litespeed-cache/' or MU

diff --git a/readme.txt b/readme.txt
@@ -256,6 +256,7 @@ You can report security bugs through the Patchstack Vulnerability Disclosure Pro
 
 = 6.5.1 - Sep 25 2024 =
 * **Media** Sanitized dimensions for the images when replacing with placeholders. (TaiYou)
+* **Page Optimize** Sanitized vary value in queue list. (TaiYou)
 * **Cloud** Silent API error when failing to retrieve news updates.
 
 = 6.5.0.2 - Sep 6 2024 =

diff --git a/tpl/page_optm/settings_css.tpl.php b/tpl/page_optm/settings_css.tpl.php
@@ -118,7 +118,7 @@
 									<?php if (!empty($v['_status'])) : ?><span class="litespeed-success"><?php endif; ?>
 										<?php echo esc_html($v['url']); ?>
 										<?php if (!empty($v['_status'])) : ?></span><?php endif; ?>
-									<?php if ($pos = strpos($k, ' ')) echo ' (' . __('Vary Group', 'litespeed-cache') . ':' . substr($k, 0, $pos) . ')'; ?>
+									<?php if ($pos = strpos($k, ' ')) echo ' (' . __('Vary Group', 'litespeed-cache') . ':' . esc_html(substr($k, 0, $pos)) . ')'; ?>
 									<?php if ($v['is_mobile']) echo ' <span data-balloon-pos="up" aria-label="mobile">📱</span>'; ?>
 									<?php if (!empty($v['is_webp'])) echo ' WebP'; ?>
 									<br />
@@ -235,7 +235,7 @@
 									<?php if (!empty($v['_status'])) : ?><span class="litespeed-success"><?php endif; ?>
 										<?php echo esc_html($v['url']); ?>
 										<?php if (!empty($v['_status'])) : ?></span><?php endif; ?>
-									<?php if ($pos = strpos($k, ' ')) echo ' (' . __('Vary Group', 'litespeed-cache') . ':' . substr($k, 0, $pos) . ')'; ?>
+									<?php if ($pos = strpos($k, ' ')) echo ' (' . __('Vary Group', 'litespeed-cache') . ':' . esc_html(substr($k, 0, $pos)) . ')'; ?>
 									<?php if ($v['is_mobile']) echo ' <span data-balloon-pos="up" aria-label="mobile">📱</span>'; ?>
 									<?php if (!empty($v['is_webp'])) echo ' WebP'; ?>
 									<br />

diff --git a/tpl/page_optm/settings_vpi.tpl.php b/tpl/page_optm/settings_vpi.tpl.php
@@ -64,7 +64,7 @@
 							<?php if ( ! empty( $v[ '_status' ] ) ) : ?><span class="litespeed-success"><?php endif; ?>
 							<?php echo esc_html( $v[ 'url' ] ); ?>
 							<?php if ( ! empty( $v[ '_status' ] ) ) : ?></span><?php endif; ?>
-							<?php if ( $pos = strpos( $k, ' ' ) ) echo ' (' . __( 'Vary Group', 'litespeed-cache' ) . ':' . substr( $k, 0, $pos ) . ')'; ?>
+							<?php if ( $pos = strpos( $k, ' ' ) ) echo ' (' . __( 'Vary Group', 'litespeed-cache' ) . ':' . esc_html( substr( $k, 0, $pos ) ) . ')'; ?>
 							<?php if ( $v[ 'is_mobile' ] ) echo ' <span data-balloon-pos="up" aria-label="mobile">📱</span>'; ?>
 							<br />
 						<?php endforeach; ?>