Skip to content

Fix/security improvements#18

Open
AtsushiA wants to merge 4 commits intocr0ybot:mainfrom
AtsushiA:fix/security-improvements
Open

Fix/security improvements#18
AtsushiA wants to merge 4 commits intocr0ybot:mainfrom
AtsushiA:fix/security-improvements

Conversation

@AtsushiA
Copy link
Copy Markdown
Contributor

No description provided.

AtsushiA and others added 4 commits February 5, 2026 19:52
- Replace deprecated mb_convert_encoding() with XML encoding declaration
- Add LIBXML_NOERROR flag to suppress HTML5 tag warnings (figure, figcaption)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add support for extracting images from RSS enclosure elements
- Fix image link to point to article URL instead of image URL
- Add null safety checks for block context values

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Fix remaining mb_convert_encoding() deprecation in util.php
- Add wp_http_validate_url() validation to AJAX URL input
- Fix rel/target double-wrapping in feed-item-link render
- Apply esc_html() consistently in feed-item-summary render
- Fix DateTime typo (DateTIme) in feed-item-date render

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant