Releases: getgrav/grav-plugin-shortcode-core
Releases · getgrav/grav-plugin-shortcode-core
Release list
6.2.2
Bugfix
- [security] Shortcode parameters that set an element's color, size, id, class or style are now escaped when written into the page, closing a stored cross-site scripting hole where a crafted value could break out of the attribute and run script in a visitor's or an administrator's browser (GHSA-q5fw-vpqc-fgph).
6.2.1
Bugfix
- Fixed the
[safe-email]shortcode producing a broken, double-wrapped link when Grav's GFM autolinker had already turned the bare address into a mailto link.
6.2.0
Improved
- Renamed the
TarsParseradded in 6.1.0 toHybridParser, a name that better describes how it works: one regex pass lexes every tag, then a stack-based pass resolves nesting. It pairs RegexParser's speed with RegularParser's correctness. - Made
hybridthe default parser for new installs and renamed the matching Processor dropdown option in the plugin settings. - Kept the old
tarssetting working. Sites that selected it keep running unchanged, the value now resolves toHybridParserautomatically, so no config edits are needed.
6.1.0
New
- Added the new
TarsParser, which matches the Regular parser's correctness but runs several times faster and uses less memory. - Made Tars the default parser for new installs, selectable from the Processor dropdown in the plugin settings.