WP Manifestindependent plugin directory
manifest / content / cfs-markdown

CFS - Markdown Add-On WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

A Simple Markdown Add-On for Custom Field Suite

★ 5stars
0.1.0latest · 11 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/robneu/cfs-markdown/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Custom Field Suite Markdown Add-On

A simple Markdown add-on for Custom Field Suite

Contributors: Robert Neu
Requires: CFS 2.4, WordPress 4.1.1
Tested up to: CFS 2.4, WordPress 4.1.1
License: GPL-2.0+

This is a small add-on for Custom Field Suite which adds a Markdown field type. The field works similarly to the standard textarea input except that it accepts Markdown syntax. In addition to being able to parse and display markdown correctly on the front end, the field also features a WYSIWYG-ish toolbar and a live Markdown preview window to make adding Markdown easier.

Standard Field

Loop Field

Markdown support is added using the Parsedown class by Emanuil Rusev.

Markdown preview and WYSIWYG toolbar uses a modified version of Meltdown

Installation

  • Click the "Download ZIP" button on the right side of this GitHub page.
  • Upload the unzipped folder into the /wp-content/plugins/ directory, OR
  • Upload the zip file into WordPress (Plugins > Add New > Upload)
  • Activate the plugin (CFS must also be active)

Git

Clone this repository in /wp-content/plugins/:

git clone https://github.com/robneu/cfs-markdown.git

Then go to the Plugins screen in your WordPress admin panel and click the Activate link under CFS - Markdown Add-On.

Updating

There are a couple of plugins for managing updates to GitHub-hosted plugins. Either of these should notify you when this plugin is updated:

Releases

2 releases.

Tag
Published
0.1.0 latest
Feb 21, 2015 11 years ago
Feb 21, 2015 11 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

CFS - Markdown Add-On 0.1.0 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.1.0
Findings
1
Worst severity
low
Content hash
d1480de53c47aab7dfd05b1b…

Findings

  • low Missing escaping on CFS markdown field value in admin UI

    missing_escaping

    html() prints $field->value inside a textarea without esc_textarea. Low impact because only users who can edit the post/fields reach this UI, but stored values with unexpected markup are not escaped at output.

    includes/class-cfs-markdown.php:35-35

    Recommendation

    Use esc_textarea( $field->value ) and escape attribute outputs with esc_attr.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.