2.1.11 - Fix Card meta HTML escaping regression

Fix

• Card blocks displaying raw HTML span tags: The security escaping added in 2.1.10 over-escaped internally-generated HTML in card meta output, causing <span class="nb-card__meta--primary"> tags to be displayed as visible text instead of rendered HTML. This affected category, author, tag, and other meta text on Card blocks.

Details

The fix moves text escaping to the data source (novablocks_get_post_card_meta()) and uses wp_kses_post() in the shared wrapper function to allow the internally-generated HTML structure while maintaining XSS protection.

Fixes #477

2.1.10 - Security Hardening

2.1.10 - Security hardening release

• Security: Fix Stored XSS in Separator block
• Security: Sanitize comment meta data with sanitize_text_field()
• Security: Add input validation and sanitization to REST API endpoint
• Security: Add isset() check for $_GET['page'] in client-assets.php
• Security: Escape site description and sanitize className in logo block
• Security: Escape author display name and style in post-meta block
• Security: Escape style and class attributes in multiple blocks
• Fix: Restore inline SVG rendering in Decorative separator style
• Fix: Separator lines/arrows color now matches symbol color in Hero blocks
• Fix: Block preview crashes in WP 6.9 editor
• Update: Tested up to WordPress 6.9.1

2.1.9

Full Changelog: 2.1.6...2.1.9

v2.1.7

• Resolved a compatibility issue with WordPress 6.5.x where blocks displayed the error "This block has encountered an error and cannot be previewed."
• Fixed an intermittent issue where 'novablocks-drawers' could collapse due to a miscalculation of height at 0px. This was caused by the 'getActiveDrawerTitleHeight' function returning incorrect values under certain rendering conditions.
• Modified the Conversation System to make the "Background" field optional, addressing errors encountered when users tried to comment without filling this field.
• Tested compatibility with the latest WordPress 6.5.3 version.

v.2.1.6

• Fixed issue with blocks options being hidden when opening a sliding panel
• Restored missing Content Alignment icons in Space and Sizing component

v2.1.5

• Fix Supernova query in certain situations.
• Fix PHP warnings.
• Test with the latest WordPress version (6.0.3).

v1.13.5

• Fixes for Posts Collection block (missing isLandscape attribute)
• Replace deprecated filter for blocks category
• Fix core package script missing dependency

v2.1.4

• Add scrolling effect preview for Supernova blocks with carousel layout.
• Improve container and content height behavior for blocks with or without Doppler effect.
• Fix PHP 8.0+ error.
• Test with the latest WordPress version (6.0.1).

v2.1.2

• Add the ability to preview the scrolling effect set for supernova blocks inside the editor
• Add the block appender to the novablocks/supernova-item block for easier inner blocks insertion
• Add support for custom id and classnames for supernova and supernova-item blocks
• Fix header foreground color when overlapping colorful blocks
• Fix header block animation on scroll in Safari

v2.1.1

• Fix Supernova block controlling its innerBlocks count and their attributes
• Fix shapes generated by ShapeModeling component; remove animations from editor