Merge pull request #49 from brainstormforce/dev

Build version 1.1.4

README.md

@@ -3,7 +3,7 @@
 **Donate link:** https://www.paypal.me/BrainstormForce  
 **Requires at least:** 4.4  
 **Tags:** beaver builder, page builder timeline, bb timeline, timelines, drag and drop timeline, Timeline Module for Beaver Builder  
-**Stable tag:** 1.1.3  
+**Stable tag:** 1.1.4  
 **Tested up to:** 6.6  
 **License:** GPLv2 or later  
 **License URI:** http://www.gnu.org/licenses/gpl-2.0.html  
@@ -106,6 +106,9 @@ Visit our website to know more about the top WordPress products and services we
 
 ## Changelog ##
 
+### 1.1.4 ###
+* Improvement: Hardened the security of plugin.
+
 ### 1.1.3 ###
 * This update addressed a security bug. Props to Patchstack for privately reporting it to our team. Please make sure you are using the latest version on your website.
 * Improvement: Improved codebase for improved security.

readme.txt

@@ -3,7 +3,7 @@ Contributors: pratikchaskar
 Donate link: https://www.paypal.me/BrainstormForce
 Requires at least: 4.4
 Tags: beaver builder, page builder timeline, bb timeline, timelines, drag and drop timeline, Timeline Module for Beaver Builder
-Stable tag: 1.1.3
+Stable tag: 1.1.4
 Tested up to: 6.6
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -106,6 +106,9 @@ Visit our website to know more about the top WordPress products and services we
 
 == Changelog ==
 
+= 1.1.4 =
+* Improvement: Hardened the security of plugin.
+
 = 1.1.3 =
 * This update addressed a security bug. Props to Patchstack for privately reporting it to our team. Please make sure you are using the latest version on your website.
 * Improvement: Improved codebase for improved security.

timeline-for-beaver-builder-module/includes/frontend.php

@@ -7,6 +7,10 @@
 
 ?>
 
+<?php
+$allowed_title_tags = array( 'h1', 'h2', 'h3', 'h4', 'h5', 'h6' );
+$tmtitle_tag        = in_array( $settings->tmtitle_tag, $allowed_title_tags, true ) ? $settings->tmtitle_tag : 'h3';
+?>
 <?php if ( 'both' != $settings->timeline_layout ) { ?> 
 <!-- If Left Or Right -->
 <div class="bb-tmtimeline-container bb-timeline-<?php echo esc_attr( $settings->timeline_layout ); ?>">
@@ -68,9 +72,9 @@
 				?>
 				<div class="bb-tmlabel <?php echo esc_attr( $hide_class ); ?>">	
 					<!--Timline-Title-->
-					<<?php echo esc_attr( $settings->tmtitle_tag ); ?> class="bb-timline-title bb-tm-title-<?php echo esc_attr( $timeline1->timeline_title_align ); ?>">
+					<<?php echo esc_attr( $tmtitle_tag ); ?> class="bb-timline-title bb-tm-title-<?php echo esc_attr( $timeline1->timeline_title_align ); ?>">
 						<?php echo esc_html( $timeline1->timeline_title ); ?>
-					</<?php echo esc_attr( $settings->tmtitle_tag ); ?>>
+					</<?php echo esc_attr( $tmtitle_tag ); ?>>
 					<!--/.Timline-Title-->
 
 					<div class="tm-title-border-bottom">
@@ -147,9 +151,9 @@
 				?>
 				<div class="bb-tmlabel <?php echo esc_attr( $hide_class ); ?>">
 					<!--Timline-Title-->
-					<<?php echo esc_attr( $settings->tmtitle_tag ); ?> class="bb-timline-title bb-tm-title-<?php echo esc_attr( $timeline1->timeline_title_align ); ?>">
+					<<?php echo esc_attr( $tmtitle_tag ); ?> class="bb-timline-title bb-tm-title-<?php echo esc_attr( $timeline1->timeline_title_align ); ?>">
 						<?php echo esc_html( $timeline1->timeline_title ); ?>
-					</<?php echo esc_attr( $settings->tmtitle_tag ); ?>>
+					</<?php echo esc_attr( $tmtitle_tag ); ?>>
 					<!--/.Timline-Title-->
 					<div class="tm-title-border-bottom">
 						<span class="bb-tmlabel-border-bottom"></span>

timeline-for-beaver-builder.php

@@ -3,7 +3,7 @@
  * Plugin Name: Timeline Module for Beaver Builder
  * Plugin URI: https://www.brainstormforce.com/
  * Description: Timeline for Beaver Builder is a custom modules for Beaver Builder to create the awesome responsive timeline with animation.
- * Version: 1.1.3
+ * Version: 1.1.4
  * Author: Pratik Chaskar
  * Author URI: https://pratikchaskar.com/
  * Text Domain: bb-timeline