update: Security Update(Prevent Cross-Site Scripting)

sifat009 · sifat009 · commit 90eef709e85f · 2025-02-05T13:05:43.000+06:00
diff --git a/build/qubely/assets/js/qubely.min.js b/build/qubely/assets/js/qubely.min.js
diff --git a/build/qubely/core/blocks/postgrid.php b/build/qubely/core/blocks/postgrid.php
@@ -1414,9 +1414,9 @@ function qubely_excerpt_max_charlength($limit)
 	} else {
 		$col = "";
 	}
-	$class = 'wp-block-qubely-postgrid qubely-block-' . $uniqueId;
+	$class = 'wp-block-qubely-postgrid qubely-block-' . esc_attr($uniqueId);
 	if (isset($att['align'])) {
-		$class .= ' align' . $att['align'];
+		$class .= ' align' . esc_attr($att['align']);
 	}
 	if (isset($att['className'])) {
 		$class .= esc_attr($att['className']);
diff --git a/build/qubely/qubely.php b/build/qubely/qubely.php
@@ -3,12 +3,12 @@
  * Plugin Name:       Qubely - Advanced Gutenberg Blocks
  * Plugin URI:        https://www.themeum.com/
  * Description:       The one and only Gutenberg block plugin you will ever need.
- * Version:           1.8.12
+ * Version:           1.8.13
  * Author:            Themeum
  * Author URI:        https://www.themeum.com/
  * Text Domain:       qubely
  * Requires at least: 5.3
- * Tested up to:       6.6.2
+ * Tested up to:      6.7
  * License:           GPL-2.0+
  * License URI:       http://www.gnu.org/licenses/gpl-2.0.txt
  */
@@ -24,7 +24,7 @@ function qubely_language_load()
 }
 
 // Define Version
-define('QUBELY_VERSION', '1.8.12');
+define('QUBELY_VERSION', '1.8.13');
 
 // Define License
 define('QUBELY_LICENSE', 'free');
diff --git a/build/qubely/readme.txt b/build/qubely/readme.txt
@@ -3,8 +3,8 @@ Contributors: themeum
 Donate link: https://www.themeum.com
 Tags: blocks, gutenberg, gutenberg blocks, editor, block, page builder
 Requires at least: 5.3
-Tested up to: 6.6.2
-Stable tag: 1.8.12
+Tested up to: 6.7
+Stable tag: 1.8.13
 Requires PHP: 7.0
 License: GPL-2.0+
 License URI: http://www.gnu.org/licenses/gpl-2.0.txt
@@ -230,6 +230,9 @@ You can report bugs on the [support forum here](https://wordpress.org/support/pl
 
 == Changelog ==
 
+= 1.8.13 =
+Update: Security Update(Prevent Cross-Site Scripting)
+
 = 1.8.12 =
 Update: Added WordPress 6.6 Compatibility
 
diff --git a/core/blocks/postgrid.php b/core/blocks/postgrid.php
@@ -1414,9 +1414,9 @@ function qubely_excerpt_max_charlength($limit)
 	} else {
 		$col = "";
 	}
-	$class = 'wp-block-qubely-postgrid qubely-block-' . $uniqueId;
+	$class = 'wp-block-qubely-postgrid qubely-block-' . esc_attr($uniqueId);
 	if (isset($att['align'])) {
-		$class .= ' align' . $att['align'];
+		$class .= ' align' . esc_attr($att['align']);
 	}
 	if (isset($att['className'])) {
 		$class .= esc_attr($att['className']);
diff --git a/qubely.php b/qubely.php
@@ -3,12 +3,12 @@
  * Plugin Name:       Qubely - Advanced Gutenberg Blocks
  * Plugin URI:        https://www.themeum.com/
  * Description:       The one and only Gutenberg block plugin you will ever need.
- * Version:           1.8.12
+ * Version:           1.8.13
  * Author:            Themeum
  * Author URI:        https://www.themeum.com/
  * Text Domain:       qubely
  * Requires at least: 5.3
- * Tested up to:       6.6.2
+ * Tested up to:      6.7
  * License:           GPL-2.0+
  * License URI:       http://www.gnu.org/licenses/gpl-2.0.txt
  */
@@ -24,7 +24,7 @@ function qubely_language_load()
 }
 
 // Define Version
-define('QUBELY_VERSION', '1.8.12');
+define('QUBELY_VERSION', '1.8.13');
 
 // Define License
 define('QUBELY_LICENSE', 'free');
diff --git a/readme.txt b/readme.txt
@@ -3,8 +3,8 @@ Contributors: themeum
 Donate link: https://www.themeum.com
 Tags: blocks, gutenberg, gutenberg blocks, editor, block, page builder
 Requires at least: 5.3
-Tested up to: 6.6.2
-Stable tag: 1.8.12
+Tested up to: 6.7
+Stable tag: 1.8.13
 Requires PHP: 7.0
 License: GPL-2.0+
 License URI: http://www.gnu.org/licenses/gpl-2.0.txt
@@ -230,6 +230,9 @@ You can report bugs on the [support forum here](https://wordpress.org/support/pl
 
 == Changelog ==
 
+= 1.8.13 =
+Update: Security Update(Prevent Cross-Site Scripting)
+
 = 1.8.12 =
 Update: Added WordPress 6.6 Compatibility
 

Original file line number	Diff line number	Diff line change
`@@ -1414,9 +1414,9 @@ function qubely_excerpt_max_charlength($limit)`
`1414`	`1414`	`} else {`
`1415`	`1415`	`$col = "";`
`1416`	`1416`	`}`
`1417`		`- $class = 'wp-block-qubely-postgrid qubely-block-' . $uniqueId;`
	`1417`	`+ $class = 'wp-block-qubely-postgrid qubely-block-' . esc_attr($uniqueId);`
`1418`	`1418`	`if (isset($att['align'])) {`
`1419`		`- $class .= ' align' . $att['align'];`
	`1419`	`+ $class .= ' align' . esc_attr($att['align']);`
`1420`	`1420`	`}`
`1421`	`1421`	`if (isset($att['className'])) {`
`1422`	`1422`	`$class .= esc_attr($att['className']);`