v4.0.1
Patch Changes
-
477a555: Introduced
wp_localize_escaped_data()
function for recursively escaping data before localizing it in WordPress. This ensures safe output of strings, URLs, integers, and nested arrays when passing data to JavaScript, using native WordPress functions likewp_kses_post()
andesc_url()
. -
477a555: Enhanced security by ensuring all localized data is properly sanitized before being passed to
wp_localize_script()
, preventing potential XSS vulnerabilities and ensuring safe use of dynamic data in JavaScript. -
4da3973: - chore: Bump the npm_and_yarn group across 1 directory with 7 updates