4 versions
Greenshift history.
Every release of Greenshift is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
4 of 4 releases scanned clean
v13.2.2Latest
October 19, 20264.6 MBScanned
Fixed
- Stored DOM XSS in the Text Animated element - its first text was read as plain text and then written back as HTML, so a comment like shown by a nested Latest Comments block (Content set to Blocks) became live markup for every visitor. The text is now set as text only
- same issue in Split Text animations (data-aos-split, gs-split-words) - each word is now HTML escaped before the lines and words are rebuilt
- dynamic values that come back as numbers (for example ACF image IDs) no longer break Element text, image and video placeholders in the editor
- switching the editor preview from landscape mobile to portrait mobile now restores the core canvas width instead of keeping the landscape width
September 26, 20264.6 MBScanned
Fixed
- Reflected XSS through the {{GET:...}} and {{COOKIE:...}} dynamic placeholders - URL and cookie values are now JavaScript escaped when they are placed into element Custom JS (including Custom JS controllers) and HTML escaped everywhere else, so a crafted link can no longer break out of a script string or an HTML attribute and run code in the visitor's browser
- inspector input border styles are now limited to GreenShift panels, so input controls of the core editor and other plugins keep their own borders in light and dark mode
Improved
- wrap {{GET:...}} and {{COOKIE:...}} placeholders in quotes when you use them in Custom JS. Unquoted, only letters and digits are passed through, and any other character now stops the script with a syntax error instead of running as code
- headingContent, textContent and buttonContent were removed from wpml-config.xml for the Heading, Advanced text and Button blocks - their text is translated from the block markup
August 9, 20254.4 MBScanned
Added
- Youtube AutoPlay element
- Iframe element
- Dynamic placeholders support for href, title, src attributes of A and Iframe elements
- Switcher Element
- Social Share Element
- Section Element has also default variables for top and bottom spacing which you can overwrite in StyleBook - Variables - Variable presets
- Button Component Element and separate variables for button component (you can overwrite them in Stylebook - Variables - Variable presets)
- When you save default attributes for block, classes will be also saved
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Greenshift to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.