Contact Form 7 – Repeatable Fields

2.0.2 – 2024-10-22

This is a security release. It fixes a Stored cross-site scripting (XSS) vulnerability, that allowed users with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Thanks to Peter Thaleikis and the Wordfence team for reaching out about it.

Added:

• New wpcf7_field_group_content filter. Props @Tessachu and @felipeelia.
• End-to-end basic tests. Props @felipeelia.

Changed:

• Node version to v20. Props @felipeelia.

Security:

• Sanitize wrapper div attributes. Props Peter Thaleikis and @felipeelia.
• Bumped postcss from 8.4.26 to 8.4.31. Props @dependabot.
• Updated ws from 8.13.0 to 8.18.0. Props @dependabot.
• Updated @wordpress/scripts from 27.7.0 to 30.3.0. Props @dependabot.
• Bumped braces from 3.0.2 to 3.0.3. Props @dependabot.
• Bumped webpack from 5.91.0 to 5.94.0. Props @dependabot.
• Bumped express from 4.18.2 to 4.19.2. Props @dependabot.
• Bumped follow-redirects from 1.15.2 to 1.15.6. Props @dependabot.
• Bumped webpack-dev-middleware from 5.3.3 to 5.3.4. Props @dependabot.
• Bumped @babel/traverse from 7.22.8 to 7.23.2. Props @dependabot.
• Several node packages updated. Props @felipeelia.

2.0.1 – 2023-09-11

Added:

• End-to-end tests foundation.

Changed:

• Removed unnecessary files from final package.

Fixed:

• Required checkbox not showing validation messages.

2.0.0 – 2023-07-23

Note that this version changes minimum required versions of:

• WordPress: 6.0+
• PHP: 7.2+
• Contact Form 7: 5.7+

This release marks the (slow) resumption of this plugin development. If you want to know more about it check out this blog post. If you find this plugin useful, consider leaving it a review.

Added:

• Support to wp-env.
• group_id as a parameter to all filters.
• Very basic unit testing.

Changed:

• Linting tools and script build process.
• Docs were migrated to GitHub wiki.

Fixed:

• Validation problem with Contact Form 5.7+. Props @sfdeveloper.

1.1.3 – 2019-12-11

• Update WP Tested up to field
• Apply WP Coding Standards
• Fix a small sanitization problem

1.1.2 – 2019-10-10

• Fix Exclusive Checkboxes

1.1.1 – 2019-09-04

• Add compatibility to formatted dates ([_format_{field name} "{date format}"])
• DEV: Copy data and events while cloning a new group (JS)
• DEV: Pass $new_group as an extra param for the wpcf7-field-groups/added event.
• DEV: Apply some WPCS rules and add a CF7_REPEATABLE_FIELDS_VERSION const (may affect JS cache)

1.1 – 2018-06-14

• Replace groups in mail 2 field

1.0.2 – 2018/03/29

• Fix repeated tags in mail body

1.0.1 – 2018/03/20

• Fix the wpcf7_field_group_remove_button_atts filter name. Props to @asilvestre87

1.0.0 – 2018/03/19

• Initial release