Versão 3.3.36
Mais recente
Correção
- Fix "maximum file size" error message always appearing in English on translated sites
- Fix fatal error when a large Amazon S3 upload fails in the background; the upload is now retried, then marked as failed
- Fix only the first file uploading when several files are dropped onto a File Upload field
- Fix Submit becoming available before every selected file has finished uploading
- Fix an upload in progress being shown as an error
Versão 3.3.35
Melhoria
- Allow File Upload fields inside repeatable fieldsets to be sent to external storage
- Show an admin warning when an external storage service is disconnected automatically
- Show the Google Drive folder each uploaded file was saved to
Correção
- Fix uploaded files being deleted when their external storage service is disconnected and "Save to Server" is off
- Fix files not reaching Google Drive when a Custom Directory is set
- Fix fatal error when a Google Drive upload fails; the file is now kept on the server and marked as failed in the admin
- Fix Google Drive connection being dropped on temporary network or proxy errors
- Fix bulk delete on the File Uploads screen failing with "The link you followed has expired"
- Fix maximum file count showing an error and blocking submission when the allowed number of files is selected
- Fix "Attach File Uploads" email option not appearing until the form is saved and reloaded
- Fix PHP warnings logged when a File Upload field in a repeatable fieldset is left empty
- Fix early translation loading notice on WordPress 6.7+ when Amazon S3 is connected
Versão 3.3.34
1 melhoria
5 correções
Melhoria
- Strengthen server-side validation of uploaded file types to block disallowed files
Correção
- Fix chunked uploads being overwritten by a single chunk when a chunk request is repeated
- Fix HEIC/HEIF photo uploads failing on iPhone Safari due to a content/extension mismatch
- Fix uploaded files in repeatable fieldsets not reaching the email or submission when more than one fieldset is added
- Fix file size validation not enforcing PHP upload limits, allowing truncated files through
- Fix email action with attachments disabled inheriting another action's attachment settings when both send to the same recipient
Versão 3.3.33
Correção
- Fix File Upload merge tag suffix variants not populating during PDF export or retriggered emails
- Fix fatal error when uploading files to Amazon S3
Versão 3.3.32
Correção
- Fix download links in notification emails returning blank screen for server-stored files
Versão 3.3.31
Melhoria
- Require administrator capability for external file URL access
Correção
- Fix file upload button background staying white after file selection
- Fix submit button not reliably blocked during active file upload
- Fix "Delete" attachment button not translated in bundled translations
- Fix files >5MB not appearing in File Uploads admin after S3 background upload
- Fix file persisting on server when "Save to Server" disabled with Google Drive and file rename
- Fix external service upload URL showing server path in submissions
- Fix file extensions not in WordPress MIME registry failing upload when explicitly allowed
- Fix date shortcodes using server timezone instead of WordPress site timezone
- Fix PHP 8.4/8.5 deprecation notices in vendored libraries
Segurança
- Protect admin notices from reflected XSS via query parameters
- Sanitize uploaded filenames to block stored XSS
Versão 3.3.30
Melhoria
- Protect debug log REST endpoints from unauthenticated access
Correção
- Fix "temp file does not exist" error on form re-submission after validation error
Segurança
- Block arbitrary file read via email attachment path traversal
Versão 3.3.29
1 melhoria
5 correções
1 reforço de segurança
Melhoria
- Protect against unauthenticated file uploads
Correção
- Fix strict comparison for PHP 7.4 file extension validation
- Fix repeater file upload fields not saving all file sets
- Fix save settings translation call timing
- Suppress undefined array key warnings for upload_types
- Fix filename merge tag not appearing on payment gateways
Segurança
- Protect against XSS in AJAX response, admin submissions, and merge tags
Versão 3.3.28
Segurança
- Fix injection and CSRF in uploads table
- Fix reflected XSS in OAuth2 admin
Versão 3.3.27
Melhoria
- Block destination filename whitelist bypass in file upload
Correção
- Fix cancel button clearing all form field data
- Add aria-labelledby to file upload button for accessibility
Versão 3.3.26
Melhoria
- Block executable file variants with expanded extension blacklist
Correção
- Reconstruct file upload data for retriggered emails
Versão 3.3.25
2 correções
1 reforço de segurança
Correção
- Fix submit button state during active file uploads
- Make file type validation case-insensitive
Segurança
- Sanitize uploaded file paths
Versão 3.3.24
Correção
- Ensure translations load at correct time
- Prevent Google Drive disconnection
- Correct AWS namespacing