Release v13.2.1
Greenshift v13.2.1
What's new in v13.2.1
Greenshift v13.2.1 was released on . Do you want to build high quality animations and pages but you struggle with low performance on google tests with popular page builder? See the full changelog below and compare with the complete version history.
Release details
Released
4.6 MB
File available
Changelog
Fixed
- Reflected XSS through the {{GET:...}} and {{COOKIE:...}} dynamic placeholders - URL and cookie values are now JavaScript escaped when they are placed into element Custom JS (including Custom JS controllers) and HTML escaped everywhere else, so a crafted link can no longer break out of a script string or an HTML attribute and run code in the visitor's browser
- inspector input border styles are now limited to GreenShift panels, so input controls of the core editor and other plugins keep their own borders in light and dark mode
Improved
- wrap {{GET:...}} and {{COOKIE:...}} placeholders in quotes when you use them in Custom JS. Unquoted, only letters and digits are passed through, and any other character now stops the script with a syntax error instead of running as code
- headingContent, textContent and buttonContent were removed from wpml-config.xml for the Heading, Advanced text and Button blocks - their text is translated from the block markup
Compatibility
- Requires WordPress
- 6.9
- Tested up to
- 7.2
- Requires PHP
- 7.3
Verified safe
Greenshift v13.2.1 scanned clean with no security threats detected.
View full scan report