Plugin should be identitcal as that on Github
-
I also noticed that the plugin is not identical to that on Github so it has not yet been updated here
On Github the following file includes/class-wc-gateway-payfast.php – the output is escaped yet in the plugin downloaded from the WordPress repo – it is not escaped<?php echo wc_help_tip( esc_html__( 'This represents the fee Payfast collects for the transaction.', 'woocommerce-gateway-payfast' ) ); ?>
Using the unescaped version (__) can be a security risk because it does not ensure that the output is safe for HTML. If the string contains any malicious content, it could lead to XSS vulnerabilities.
The topic ‘Plugin should be identitcal as that on Github’ is closed to new replies.