Fancy Product Designer
ExtensionJournal des modifications 1
Toutes les publications, de la plus récente à la plus ancienne, telles que l’éditeur les a décrites dans le journal des modifications de l’extension.
6.5.3
Amélioré Corrigé Sécurité Pas encore disponible- Security: Fixed a vulnerability that allowed unauthenticated visitors to overwrite the design data of any WooCommerce order item. Saving an order design now requires a valid nonce and ownership of the order.
- Security: Fixed a stored XSS vulnerability via the product title in WooCommerce orders (reported via Wordfence).
- Security: Design data submitted on add-to-cart and when saving an order is now validated and sanitized per field. Image sources are limited to http(s), relative paths and base64 image data, and SVG print data is scrubbed of scripts and event handlers.
- Security: Escaped element titles, font family, SKU, colors, bulk variations and Names & Numbers in the cart, order emails and the admin order view.
- Fix: Base64 thumbnails were not displayed in the admin order item view.
- Fix: Custom bulk variation labels containing spaces or special characters are now preserved.
- Fix: A fatal error no longer occurs when the product designer is opened with an unknown order ID.
- Changed: Guest customers can no longer re-save the design of a placed order, because the edit link cannot prove guest ownership. This affects shops that have the WooCommerce setting "Login Required" disabled.