xwp / stream

🗄️ Stream plugin for WordPress

https://wordpress.org/plugins/stream/

GNU General Public License v2.0

405 stars 119 forks source link

Prevent sprintf errors by escaping % in post_title #1485

Open krokodok opened 1 month ago

krokodok commented 1 month ago

Fixes #1443.

Straightforward escaping of % in $post->post_title with %% prevents the error.

Checklist

[ ] Project documentation has been updated to reflect the changes in this pull request, if applicable.
[x] I have tested the changes in the local development environment (see contributing.md).
[ ] I have added phpunit tests.

Release Changelog

Fix: Describe a bug fix included in this release.

Release Checklist

[ ] This pull request is to the master branch.
[ ] Release version follows semantic versioning. Does it include breaking changes?
[ ] Update changelog in readme.txt.
[ ] Bump version in stream.php.
[ ] Bump Stable tag in readme.txt.
[ ] Bump version in classes/class-plugin.php.
[ ] Draft a release on GitHub.

Change [ ] to [x] to mark the items as done.

krokodok commented 2 weeks ago

@kasparsd To bring this PR forward, I escaped all other user input values for this connector.