The toggle existed in the UI with no implementation behind it, so uploads were rejected regardless of the setting. New SvgUploads class: - Allowlists the SVG mime type and fixes WP's real-mime sniff, which otherwise nulls out the file type for SVGs specifically even after the mime allowlist is updated. - Populates width/height metadata (parsed from the SVG's own viewBox/width/height) — without this, wp_get_missing_image_subsizes() throws undefined-array-key warnings that can corrupt the upload response's JSON on environments with warnings displayed inline. - Basic sanitization on upload (strips <script> tags, inline event handlers, javascript: URIs). Verified live via the REST media endpoint: clean upload with correct dimensions, and a malicious test SVG had its script/handlers stripped while staying valid markup. Co-Authored-By: Claude Sonnet 5 <[email protected]>
50 lines
2.2 KiB
PHP
50 lines
2.2 KiB
PHP
<?php
|
|
/*
|
|
* Plugin Name: Aurora Admin
|
|
* Plugin URI: https://aurora.co
|
|
* Description: A modern, fast WordPress admin interface.
|
|
* Version: 2.3.0
|
|
* Author: Aurora
|
|
* Text Domain: aurora-admin
|
|
* Domain Path: /languages/
|
|
* Requires PHP: 7.4
|
|
* Requires at least: 5.5
|
|
* License: GPLv2 or later
|
|
*/
|
|
|
|
defined("ABSPATH") || exit();
|
|
|
|
define("AURORA_ADMIN_VERSION", "2.3.0");
|
|
define("AURORA_ADMIN_PATH", plugin_dir_path(__FILE__));
|
|
define("AURORA_ADMIN_URL", plugins_url("aurora-admin/"));
|
|
|
|
require AURORA_ADMIN_PATH . "admin/src/App/AuroraAdmin.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Options/Settings.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Licensing/Integrity.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Licensing/License.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Utility/Assets.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Shell/MenuSerializer.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Shell/Shell.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Pages/DashboardTakeover.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Pages/SettingsPage.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Rest/DashboardData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Analytics/Analytics.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Rest/AnalyticsData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Rest/PluginsData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Rest/CommentsData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Posts/ScheduledDayFilter.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/WhiteLabel/WhiteLabel.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Pages/SubApps.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/MenuCreator/MenuCreator.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/MenuCreator/MenuCreatorData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Notices/Notices.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Notices/NoticesData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Roles/RolesData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/ActivityLog/ActivityLog.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/ActivityLog/ActivityLogData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/DatabaseExplorer/DatabaseExplorerData.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Login/LoginStyle.php";
|
|
require AURORA_ADMIN_PATH . "admin/src/Media/SvgUploads.php";
|
|
|
|
new AuroraAdmin\App\AuroraAdmin();
|