Changes in nextend-facebook-connect [1060317:1178751]

Location:

nextend-facebook-connect

Files:

• tags/1.5.5 (added)
• tags/1.5.5/buttons (added)
• tags/1.5.5/buttons/facebook-btn.css (added)
• tags/1.5.5/buttons/facebook-btn.png (added)
• tags/1.5.5/buttons/index.html (added)
• tags/1.5.5/generatorbanner.png (added)
• tags/1.5.5/index.html (added)
• tags/1.5.5/licence.txt (added)
• tags/1.5.5/nextend-facebook-connect.php (added)
• tags/1.5.5/nextend-facebook-settings.php (added)
• tags/1.5.5/readme.txt (added)
• tags/1.5.5/sdk (added)
• tags/1.5.5/sdk/base_facebook.php (added)
• tags/1.5.5/sdk/facebook.php (added)
• tags/1.5.5/sdk/fb_ca_chain_bundle.crt (added)
• tags/1.5.5/sdk/index.html (added)
• tags/1.5.5/sdk/init.php (added)
• tags/1.5.6 (added)
• tags/1.5.6/buttons (added)
• tags/1.5.6/buttons/facebook-btn.css (added)
• tags/1.5.6/buttons/facebook-btn.png (added)
• tags/1.5.6/buttons/index.html (added)
• tags/1.5.6/generatorbanner.png (added)
• tags/1.5.6/index.html (added)
• tags/1.5.6/licence.txt (added)
• tags/1.5.6/nextend-facebook-connect.php (added)
• tags/1.5.6/nextend-facebook-settings.php (added)
• tags/1.5.6/readme.txt (added)
• tags/1.5.6/sdk (added)
• tags/1.5.6/sdk/base_facebook.php (added)
• tags/1.5.6/sdk/facebook.php (added)
• tags/1.5.6/sdk/fb_ca_chain_bundle.crt (added)
• tags/1.5.6/sdk/index.html (added)
• tags/1.5.6/sdk/init.php (added)
• trunk/nextend-facebook-connect.php (modified) (5 diffs)
• trunk/readme.txt (modified) (2 diffs)

nextend-facebook-connect/trunk/nextend-facebook-connect.php

@@ -5 +5 @@
 Plugin URI: http://nextendweb.com/
 Description: This plugins helps you create Facebook login and register buttons. The login and register process only takes one click.
-Version: 1.5.4
+Version: 1.5.6
 Author: Roland Soos
 License: GPL2
@@ -418 +418 @@
 
   if ($file != NEW_FB_LOGIN_PLUGIN_BASENAME) return $links;
-  $settings_link = '<a href="' . menu_page_url('nextend-facebook-connect', false) . '">' . esc_html(__('Settings', 'nextend-facebook-connect')) . '</a>';
+  $settings_link = '<a href="' . esc_url(menu_page_url('nextend-facebook-connect', false)) . '">' . esc_html(__('Settings', 'nextend-facebook-connect')) . '</a>';
   array_unshift($links, $settings_link);
   return $links;
@@ -430 +430 @@
 
   global $new_fb_settings;
-  return '<a href="' . new_fb_login_url() . (isset($_GET['redirect_to']) ? '&redirect=' . $_GET['redirect_to'] : '') . '" rel="nofollow">' . $new_fb_settings['fb_login_button'] . '</a><br />';
+  return '<a href="' . esc_url(new_fb_login_url() . (isset($_GET['redirect_to']) ? '&redirect=' . $_GET['redirect_to'] : '')) . '" rel="nofollow">' . $new_fb_settings['fb_login_button'] . '</a><br />';
 }
 
@@ -436 +436 @@
 
   global $new_fb_settings;
-  return '<a href="' . new_fb_login_url() . '&redirect=' . new_fb_curPageURL() . '">' . $new_fb_settings['fb_link_button'] . '</a><br />';
+  return '<a href="' . esc_url(new_fb_login_url() . '&redirect=' . new_fb_curPageURL()) . '">' . $new_fb_settings['fb_link_button'] . '</a><br />';
 }
 
@@ -442 +442 @@
 
   global $new_fb_settings;
-  return '<a href="' . new_fb_login_url() . '&action=unlink&redirect=' . new_fb_curPageURL() . '">' . $new_fb_settings['fb_unlink_button'] . '</a><br />';
+  return '<a href="' . esc_url(new_fb_login_url() . '&action=unlink&redirect=' . new_fb_curPageURL()) . '">' . $new_fb_settings['fb_unlink_button'] . '</a><br />';
 }
 

nextend-facebook-connect/trunk/readme.txt

@@ -4 +4 @@
 Donate link: https://www.facebook.com/nextendweb
 Requires at least: 3.0
-Tested up to: 4.0.1
-Stable tag: 1.5.4
+Tested up to: 4.2.2
+Stable tag: 1.5.6
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -73 +73 @@
 == Changelog ==
 
+= 1.5.6 =
+* XSS Vulnerability fix
+
 = 1.5.4 =
 * Updated installation instruction