Deployed from wpsocio/wp-projects@00c4c74

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.10.22
+
+### Patch Changes
+
+- [#155](https://github.com/wpsocio/wp-projects/pull/155) [`669eedd`](https://github.com/wpsocio/wp-projects/commit/669eedd4639c206ad65cbdd312b1628c412ba090) Thanks [@irshadahmad21](https://github.com/irshadahmad21)! - Fixed login shortcode attributes sanitization
+
 ## 1.10.21
 
 ### Patch Changes

README.md

@@ -5,7 +5,7 @@
 **Requires at least:** 6.4  
 **Requires PHP:** 7.4  
 **Tested up to:** 6.6.1  
-**Stable tag:** 1.10.21  
+**Stable tag:** 1.10.22  
 **License:** GPL-3.0-or-later  
 **License URI:** [https://www.gnu.org/licenses/gpl-3.0.html](https://www.gnu.org/licenses/gpl-3.0.html)  
 **Donate link:** [wpsocio.com/donate](https://wpsocio.com/donate)

assets/build/dependencies.json

@@ -2,9 +2,9 @@
   "js/settings/index.ts": [
     "react",
     "react-dom",
-    "wp-i18n",
     "jquery",
-    "wp-api-fetch"
+    "wp-api-fetch",
+    "wp-i18n"
   ],
   "js/blocks/index.ts": [
     "wp-blocks",

languages/wptelegram-login.pot

@@ -2,16 +2,16 @@
 # This file is distributed under the GPL-2.0+.
 msgid ""
 msgstr ""
-"Project-Id-Version: WP Telegram Login 1.10.21\n"
+"Project-Id-Version: WP Telegram Login 1.10.22\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/wptelegram-login\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <[email protected]>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2024-08-01T11:16:15+00:00\n"
+"POT-Creation-Date: 2024-08-05T15:43:18+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
-"X-Generator: WP-CLI 2.11.0-alpha-9a91926\n"
+"X-Generator: WP-CLI 2.11.0-alpha-805d68f\n"
 "language: en_US\n"
 "X-Poedit-Basepath: ..\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"

readme.txt

@@ -5,7 +5,7 @@ Tags: telegram, login, register, social, signup
 Requires at least: 6.4
 Requires PHP: 7.4
 Tested up to: 6.6.1
-Stable tag: 1.10.21
+Stable tag: 1.10.22
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
 
@@ -154,7 +154,7 @@ Automatic updates should work smoothly, but we still recommend you back up your
 
 == Changelog ==
 
-= 1.10.21 =
-- Fixed settings page and post editor crash for older Wp versions
+= 1.10.22 =
+- Fixed login shortcode attributes sanitization
 
 [See full changelog](https://github.com/wpsocio/wptelegram-login/blob/main/CHANGELOG.md)

shared/partials/login-view.php

@@ -42,8 +42,16 @@
 
 	$atts .= ' data-error-message="' . $error_message . '" onerror="(function(script){if(script.dataset.errorMessage){var doc=document,div=doc.createElement(\'div\'),span=doc.createElement(\'span\');span.appendChild(doc.createTextNode(script.dataset.errorMessage));div.setAttribute(\'class\', \'error-message\');div.appendChild(span);Object.assign(div.style,{overflow:\'scroll\',border:\'1px solid rgb(221, 221, 221)\',textAlign:\'center\',display:\'inline-block\',padding:\'5px\'});script.parentElement.appendChild(div);}})(this)"';
 }
-// phpcs:ignore WordPress.WP.EnqueuedResources
-$html = '<script async src="https://telegram.org/js/telegram-widget.js?6" data-telegram-login="' . $login_options['bot_username'] . '" data-size="' . $login_options['button_style'] . '" data-auth-url="' . $login_options['callback_url'] . '" data-request-access="write" ' . $atts . '></script>';
+
+$html = sprintf(
+	// phpcs:ignore WordPress.WP.EnqueuedResources
+	'<script async src="https://telegram.org/js/telegram-widget.js?%1$s" data-telegram-login="%2$s" data-size="%3$s" data-auth-url="%4$s" data-request-access="write" %5$s></script>',
+	esc_attr( WPTG_Login()->version() ),
+	esc_attr( $login_options['bot_username'] ),
+	esc_attr( ( $login_options['button_style'] ) ),
+	esc_url( $login_options['callback_url'] ),
+	$atts
+);
 ?>
 <div class="wptelegram-login-output-wrap container">
 	<?php echo $html; // phpcs:ignore WordPress.Security.EscapeOutput ?>

vendor/composer/installed.php

@@ -1,8 +1,8 @@
 <?php return array(
     'root' => array(
         'name' => 'wpsocio/wptelegram-login',
-        'pretty_version' => '1.10.21',
-        'version' => '1.10.21.0',
+        'pretty_version' => '1.10.22',
+        'version' => '1.10.22.0',
         'reference' => null,
         'type' => 'library',
         'install_path' => __DIR__ . '/../../../',
@@ -20,8 +20,8 @@
             'dev_requirement' => false,
         ),
         'wpsocio/wptelegram-login' => array(
-            'pretty_version' => '1.10.21',
-            'version' => '1.10.21.0',
+            'pretty_version' => '1.10.22',
+            'version' => '1.10.22.0',
             'reference' => null,
             'type' => 'library',
             'install_path' => __DIR__ . '/../../../',

wptelegram-login.php

@@ -10,7 +10,7 @@
  * Plugin Name:       WP Telegram Login
  * Plugin URI:        https://t.me/WPTelegram
  * Description:       Let the users login to your WordPress website with their Telegram and make it simple for them to get connected and let them receive their email notifications on Telegram.
- * Version:           1.10.21
+ * Version:           1.10.22
  * Requires at least: 6.4
  * Requires PHP:      7.4
  * Author:            WP Socio
@@ -29,7 +29,7 @@
 /**
  * Currently plugin version.
  */
-define( 'WPTELEGRAM_LOGIN_VER', '1.10.21' );
+define( 'WPTELEGRAM_LOGIN_VER', '1.10.22' );
 
 defined( 'WPTELEGRAM_LOGIN_MAIN_FILE' ) || define( 'WPTELEGRAM_LOGIN_MAIN_FILE', __FILE__ );