Updates to 6.2.9

acf.php

@@ -9,7 +9,7 @@
  * Plugin Name: Advanced Custom Fields PRO
  * Plugin URI: https://www.advancedcustomfields.com
  * Description: Customize WordPress with powerful, professional and intuitive fields.
- * Version: 6.2.8
+ * Version: 6.2.9
  * Author: WP Engine
  * Author URI: https://wpengine.com/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=plugin_directory&utm_content=advanced_custom_fields
  * Update URI: https://www.advancedcustomfields.com/pro
@@ -36,7 +36,7 @@ class ACF {
  *
  * @var string
  */
- public $version = '6.2.8';
+ public $version = '6.2.9';
 
  /**
  * The plugin settings array.

includes/admin/post-types/admin-field-group.php

@@ -353,11 +353,12 @@ public function save_post( $post_id, $post ) {
  }
 
  $_POST['acf_field_group']['ID'] = $post_id;
- // phpcs:disable WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Sanitized when saved.
- $_POST['acf_field_group']['title'] = acf_maybe_get_POST( 'post_title', '' );
+ // phpcs:disable WordPress.Security.ValidatedSanitizedInput
+ $_POST['acf_field_group']['title'] = isset( $_POST['post_title'] ) ? $_POST['post_title'] : ''; // Post title is stored unsafe like WordPress, escaped on output.
 
  // save field group.
- acf_update_field_group( $_POST['acf_field_group'] ); //phpcs:ignore WordPress.Security.ValidatedSanitizedInput
+ acf_update_field_group( $_POST['acf_field_group'] );
+ // phpcs:enable WordPress.Security.ValidatedSanitizedInput
  // phpcs:enable WordPress.Security.NonceVerification.Missing
 
  return $post_id;

includes/forms/form-post.php

@@ -191,10 +191,13 @@ public function edit_form_after_title() {
  // render 'acf_after_title' metaboxes
  do_meta_boxes( get_current_screen(), 'acf_after_title', $post );
 
- if ( ! empty( $this->style ) ) {
-  // render dynamic field group style, using wp_strip_all_tags as this is filterable, but should only contain valid styles and no html.
- echo '<style type="text/css" id="acf-style">' . wp_strip_all_tags( $this->style ) . '</style>'; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- CSS only, escaped by wp_strip_all_tags.
+ $style = '';
+ if ( is_string( $this->style ) ) {
+ $style = $this->style;
  }
+
+ // Render dynamic field group style, using wp_strip_all_tags as this is filterable, but should only contain valid styles and no html.
+ echo '<style type="text/css" id="acf-style">' . wp_strip_all_tags( $style ) . '</style>'; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- CSS only, escaped by wp_strip_all_tags.
  }
 
  /**

lang/acf-ar.po

@@ -12,7 +12,7 @@
 # This file is distributed under the same license as Advanced Custom Fields.
 msgid ""
 msgstr ""
-"PO-Revision-Date: 2024-03-29T21:10:52+00:00\n"
+"PO-Revision-Date: 2024-04-08T08:54:42+00:00\n"
 "Report-Msgid-Bugs-To: http:https://support.advancedcustomfields.com\n"
 "Language: ar\n"
 "MIME-Version: 1.0\n"

lang/acf-bg_BG.po

@@ -12,7 +12,7 @@
 # This file is distributed under the same license as Advanced Custom Fields.
 msgid ""
 msgstr ""
-"PO-Revision-Date: 2024-03-29T21:10:52+00:00\n"
+"PO-Revision-Date: 2024-04-08T08:54:42+00:00\n"
 "Report-Msgid-Bugs-To: http:https://support.advancedcustomfields.com\n"
 "Language: bg_BG\n"
 "MIME-Version: 1.0\n"