Changeset 3780094 for posts-data-table/trunk/src/Simple_Posts_Table.php

Timestamp:

11/02/2026 03:08:15 PM (4 days ago)

Author:

amirition

Message:

Update to version 1.4.15 from GitHub

File:

• posts-data-table/trunk/src/Simple_Posts_Table.php (modified) (2 diffs)

posts-data-table/trunk/src/Simple_Posts_Table.php

@@ -170 +170 @@
                 $args['scroll_offset']   = filter_var( $args['scroll_offset'], FILTER_VALIDATE_INT );
 
+                // Strip characters that could form HTML from the date format. The date is also escaped on output.
+                $args['date_format'] = str_replace( [ '<', '>', '"', "'", '`' ], '', (string) $args['date_format'] );
+
                 if ( empty( $args['date_format'] ) ) {
                         $args['date_format'] = self::$default_args['date_format'];
@@ -336 +339 @@
                                         '{categories}' => get_the_category_list( ', ', '', $_post->ID ),
                                         '{tags}'       => get_the_tag_list( '', ', ', '', $_post->ID ),
-                                        '{date}'       => get_the_date( $args['date_format'], $_post ),
+                                        '{date}'       => esc_html( get_the_date( $args['date_format'], $_post ) ),
                                         '{author}'     => $author,
                                         '{content}'    => $this->get_post_content( $args['content_length'] ),