magdev 98359d4cfb Security audit fixes: fn() whitelist, escaping, and performance (v0.1.4) ...

- WooCommerceExtension: ALLOWED_FUNCTIONS whitelist for fn() Twig function
- Notice templates: data attributes use wp_kses_post instead of raw
- Search form: esc_attr on search query value attribute
- Per-request ContextBuilder caching via static variable
- Shared wc_bootstrap_render_in_page_shell() helper (DRY)
- Removed unused WC_BOOTSTRAP_VERSION and WC_BOOTSTRAP_URL constants

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-01 01:02:43 +01:00

..

error.html.twig

Security audit fixes: fn() whitelist, escaping, and performance (v0.1.4)

2026-03-01 01:02:43 +01:00

notice.html.twig

Security audit fixes: fn() whitelist, escaping, and performance (v0.1.4)

2026-03-01 01:02:43 +01:00

success.html.twig

Security audit fixes: fn() whitelist, escaping, and performance (v0.1.4)

2026-03-01 01:02:43 +01:00