Summary
Maintenance Release
The latest update of The Events Calendar ensures Elementor HTML tags are properly escaped to avoid potential Stored Cross Site Scripting.
As always, we recommend testing updates on a staging site first, but it should all be smooth sailing.
✅ Fixes
Bugs squashed in this release:
- Ensure Elementor HTML tags are properly escaped to avoid potential Stored Cross Site Scripting.
- Added check to `disable_blocks_on_display` for if `$content` is `null`.
- Ensure Aggregator translations are not loaded before init.
- Fixes edge cases where the nonce_user_logged_out hook was returning a value when the user was logged out, causing the nonce validation to fail.
- Fix the filter name `tec_views_v2_subscribe_links_{$slug}_label` which was accidentally changed in a previous release.
- Re-add logic to add page template options from theme to Display Settings.
- Update Tribe__Events__Aggregator__Errors to ensure we don’t load translations before `init`.
- Update uses of unload_textdomain to ensure they allow JIT loading of translations afterward.
- Updated the event search page to handle search results better for screen readers, with alerts noting the results of the search.
⚙️ Tweaks
Tweaks in this release:
- Updated Telemetry heading under Settings > Debugging.
- Moved Action Scheduler loading into Common instead of TEC.
- Readded filters: `tec_views_v2_subscribe_links_{$slug}_label`
- Removed duplicate filters: `tec_views_v2_single_subscribe_links_{$slug}_label`
- Changed views: `integrations/elementor/widgets/event-calendar-link`, `integrations/elementor/widgets/event-datetime/range-separator`, `v2/components/loader`, `v2/components/messages`
🗣 Translations
Updated language files and strings:
- 3 new strings added
- 84 updated
- 0 fuzzied
- 2 obsoleted