Deploying version 6.4.3

Author: mattgrshaw

acf.php

@@ -9,7 +9,7 @@
  * Plugin Name:       Advanced Custom Fields
  * Plugin URI:        https://www.advancedcustomfields.com
  * Description:       Customize WordPress with powerful, professional and intuitive fields.
- * Version:           6.4.2
+ * Version:           6.4.3
  * Author:            WP Engine
  * Author URI:        https://wpengine.com/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=plugin_directory&utm_content=advanced_custom_fields
  * Update URI:        https://www.advancedcustomfields.com
@@ -36,7 +36,7 @@ class ACF {
 		 *
 		 * @var string
 		 */
-		public $version = '6.4.2';
+		public $version = '6.4.3';
 
 		/**
 		 * The plugin settings array.

assets/build/js/acf-escaped-html-notice.min.js

@@ -14,7 +14,13 @@
 		}
 	],
 	"config": {
-		"optimize-autoloader": true
+		"optimize-autoloader": true,
+		"classmap-authoritative": true
+	},
+	"scripts": {
+		"post-autoload-dump": [
+			"sed -i '' \"/InstalledVersions.php/d\" vendor/composer/autoload_static.php"
+		]
 	},
 	"require": {}
 }

assets/build/js/acf-field-group.min.js

@@ -142,14 +142,21 @@ public function request( $endpoint = '', $body = null ) {
 				acf_log( $url, $body );
 			}
 
+			// If we're posting an ACF license key, set it as the header.
+			if ( is_array( $body ) && isset( $body['acf_license'] ) ) {
+				$headers['X-ACF-License'] = $body['acf_license'];
+			}
+
 			// Determine URL.
 			if ( acf_is_pro() ) {
-				$license_key = acf_pro_get_license_key();
-				if ( empty( $license_key ) || ! is_string( $license_key ) ) {
-					$license_key = '';
+				if ( empty( $headers['X-ACF-License'] ) ) {
+					$license_key = acf_pro_get_license_key();
+					if ( empty( $license_key ) || ! is_string( $license_key ) ) {
+						$license_key = '';
+					}
+					$headers['X-ACF-License'] = $license_key;
 				}
-				$headers['X-ACF-License'] = $license_key;
-				$headers['X-ACF-Plugin']  = 'pro';
+				$headers['X-ACF-Plugin'] = 'pro';
 			} else {
 				$headers['X-ACF-Plugin'] = 'acf';
 			}

assets/build/js/acf-input.min.js

@@ -847,7 +847,7 @@ function acf_render_field_label( $field ) {
 function acf_get_field_label( $field, $context = '' ) {
 
 	// Get label.
-	$label = $field['label'];
+	$label = esc_html( $field['label'] );
 
 	// Display empty text when editing field.
 	if ( $context == 'admin' && $label === '' ) {

assets/build/js/acf-internal-post-type.min.js

@@ -549,8 +549,8 @@ public function check_activate() {
 				foreach ( $activated as $activated_id ) {
 					$links[] = sprintf(
 						'<a href="%1$s">%2$s</a>',
-						get_edit_post_link( $activated_id ),
-						get_the_title( $activated_id )
+						esc_url( get_edit_post_link( $activated_id ) ),
+						esc_html( get_the_title( $activated_id ) )
 					);
 				}
 
@@ -619,8 +619,8 @@ public function check_deactivate() {
 				foreach ( $deactivated as $deactivated_id ) {
 					$links[] = sprintf(
 						'<a href="%1$s">%2$s</a>',
-						get_edit_post_link( $deactivated_id ),
-						get_the_title( $deactivated_id )
+						esc_url( get_edit_post_link( $deactivated_id ) ),
+						esc_html( get_the_title( $deactivated_id ) )
 					);
 				}
 
@@ -688,8 +688,8 @@ public function check_duplicate() {
 				foreach ( $duplicated as $duplicated_id ) {
 					$links[] = sprintf(
 						'<a href="%1$s">%2$s</a>',
-						get_edit_post_link( $duplicated_id ),
-						get_the_title( $duplicated_id )
+						esc_url( get_edit_post_link( $duplicated_id ) ),
+						esc_html( get_the_title( $duplicated_id ) )
 					);
 				}
 
@@ -755,8 +755,8 @@ public function check_sync() {
 				foreach ( $synced as $synced_id ) {
 					$links[] = sprintf(
 						'<a href="%1$s">%2$s</a>',
-						get_edit_post_link( $synced_id ),
-						get_the_title( $synced_id )
+						esc_url( get_edit_post_link( $synced_id ) ),
+						esc_html( get_the_title( $synced_id ) )
 					);
 				}