search

indieweb / wordpress-indieauth

IndieAuth for WordPress
https://wordpress.org/plugins/indieauth/
MIT License
31 stars 11 forks source link

Sanitize Fix #208

Closed dshanske closed 3 years ago

dshanske commented 3 years ago

This fixes the issue identified in #206 by escaping the HTML, but then using htmlspecialchars to restore it for display purposes.

It also bumps the version so this can be released.

dshanske commented 3 years ago

It also changes the test token to a token the length of a standard token, generated using the same code, so if any mod_security might be tripped, this can be tested.