release: 📦 Release Plugin

CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 4.0.1
+
+### Patch Changes
+
+- 477a555: ### Added
+
+  - Introduced `wp_localize_escaped_data()` function for recursively escaping data before localizing it in WordPress. This ensures safe output of strings, URLs, integers, and nested arrays when passing data to JavaScript, using native WordPress functions like `wp_kses_post()` and `esc_url()`.
+
+  ### Improved
+
+  - Enhanced security by ensuring all localized data is properly sanitized before being passed to `wp_localize_script()`, preventing potential XSS vulnerabilities and ensuring safe use of dynamic data in JavaScript.
+
 ## 4.0.0
 
 ### Major Changes

package.json

@@ -1,6 +1,6 @@
 {
   "name": "wpgraphql-ide",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "private": true,
   "repository": {
     "type": "git",

readme.txt

@@ -3,7 +3,7 @@ Contributors: jasonbahl, joefusco
 Tags: headless, decoupled, graphql, devtools
 Requires at least: 5.7
 Tested up to: 6.5
-Stable tag: 4.0.0
+Stable tag: 4.0.1
 Requires PHP: 7.4
 License: GPL-3
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -39,6 +39,18 @@ The WPGraphQL IDE plugin includes several important dependencies. You can learn
 
 == Changelog ==
 
+= 4.0.1 =
+
+### Patch Changes
+
+- 477a555: ### Added
+
+  - Introduced `wp_localize_escaped_data()` function for recursively escaping data before localizing it in WordPress. This ensures safe output of strings, URLs, integers, and nested arrays when passing data to JavaScript, using native WordPress functions like `wp_kses_post()` and `esc_url()`.
+
+  ### Improved
+
+  - Enhanced security by ensuring all localized data is properly sanitized before being passed to `wp_localize_script()`, preventing potential XSS vulnerabilities and ensuring safe use of dynamic data in JavaScript.
+
 = 4.0.0 =
 
 ### Major Changes
@@ -55,11 +67,4 @@ The WPGraphQL IDE plugin includes several important dependencies. You can learn
 
 - 7a07c0c: Change JavaScript hook names to have consistent prefix, and update codebase to meet WordPress.org standards.
 
-= 2.1.5 =
-
-### Patch Changes
-
-- cb6eda0: Reorder sidebar menu to always have the IDE first.
-- 1f50c93: Fixes issue where custom capability was not being assigned to the administrator role. This now happens on plugin activation.
-
 [View the full changelog](https://github.com/wp-graphql/wpgraphql-ide/blob/main/CHANGELOG.md)

wpgraphql-ide.php

@@ -8,7 +8,7 @@
  * License:           GPL-3
  * License URI:       https://www.gnu.org/licenses/gpl-3.0.html
  * Text Domain:       wpgraphql-ide
- * Version:           4.0.0
+ * Version:           4.0.1
  * Requires PHP:      7.4
  * Tested up to:      6.5
  * Requires Plugins:  wp-graphql
@@ -22,7 +22,7 @@
 	exit;
 }
 
-define( 'WPGRAPHQL_IDE_VERSION', '4.0.0' );
+define( 'WPGRAPHQL_IDE_VERSION', '4.0.1' );
 define( 'WPGRAPHQL_IDE_ROOT_ELEMENT_ID', 'wpgraphql-ide-root' );
 define( 'WPGRAPHQL_IDE_PLUGIN_DIR_PATH', plugin_dir_path( __FILE__ ) );
 define( 'WPGRAPHQL_IDE_PLUGIN_URL', plugin_dir_url( __FILE__ ) );