v6.5.1-b1: * **Media** Sanitized dimensions for the images when repla…

…cing with placeholders. (TaiYou)

litespeed-cache.php

@@ -4,7 +4,7 @@
  * Plugin Name:       LiteSpeed Cache
  * Plugin URI:        https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration
  * Description:       High-performance page caching and site optimization from LiteSpeed
- * Version:           6.5.0.2
+ * Version:           6.5.1-b1
  * Author:            LiteSpeed Technologies
  * Author URI:        https://www.litespeedtech.com
  * License:           GPLv3
@@ -34,7 +34,7 @@
 	return;
 }
 
-!defined('LSCWP_V') && define('LSCWP_V', '6.5.0.2');
+!defined('LSCWP_V') && define('LSCWP_V', '6.5.1-b1');
 
 !defined('LSCWP_CONTENT_DIR') && define('LSCWP_CONTENT_DIR', WP_CONTENT_DIR);
 !defined('LSCWP_DIR') && define('LSCWP_DIR', __DIR__ . '/'); // Full absolute path '/var/www/html/***/wp-content/plugins/litespeed-cache/' or MU

readme.txt

@@ -254,6 +254,9 @@ You can report security bugs through the Patchstack Vulnerability Disclosure Pro
 
 == Changelog ==
 
+= 6.5.1 - Sep 25 2024 =
+* **Media** Sanitized dimensions for the images when replacing with placeholders. (TaiYou)
+
 = 6.5.0.2 - Sep 6 2024 =
 * **Debug** Compatibility improvement for WP installations w/o `AUTH_KEY` defined in `wp-config.php`.
 

src/media.cls.php

@@ -769,7 +769,7 @@ private function _parse_img()
 
 			$placeholder = false;
 			if (!empty($attrs['width']) && $attrs['width'] != 'auto' && !empty($attrs['height']) && $attrs['height'] != 'auto') {
-				$placeholder = $attrs['width'] . 'x' . $attrs['height'];
+				$placeholder = intval($attrs['width']) . 'x' . intval($attrs['height']);
 			}
 
 			$src_list[] = $attrs['src'];

src/placeholder.cls.php

@@ -174,6 +174,7 @@ public function replace($html, $src, $size)
 		$additional_attr = '';
 		if ($this->_conf_lqip && $this_placeholder != $this->_conf_ph_default) {
 			Debug2::debug2('[LQIP] Use resp LQIP [size] ' . $size);
+			$size = str_replace('"', '', $size);
 			$additional_attr = ' data-placeholder-resp="' . $size . '"';
 		}