Commit Graph

4 Commits

Author SHA1 Message Date
peptiderepo
4b04b22161 fix: escape get_search_query() output to prevent XSS in search forms
Wrapped get_search_query() with esc_attr() in 404.php, front-page.php,
and searchform.php. Without this, a crafted search query can inject
arbitrary HTML attributes into the search input value field.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-12 16:22:48 +07:00
Terence Ong
71ba09e18c feat: add PRAutoBlogger posts widget to front page
Renders PRAutoBlogger-generated research articles as a card grid
between the hero section and the peptide news feed. Wrapped in
shortcode_exists() so it degrades gracefully if the plugin is
deactivated.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-10 18:44:00 +07:00
peptiderepo
878e360c96 fix: switch to rsync deploy for private repo 2026-04-08 09:35:44 +07:00
peptiderepo
9642066846 Initial commit: peptide-starter theme v1.3.1 2026-04-08 01:30:16 +07:00