Changeset: 3456870 Plugin: interactivecalculator Timestamp: 2026-02-09 09:04:44 AM (12 days ago) Author: interactivecalculator Message: Security patch File: interactivecalculator/trunk/interactivecalculator.php Changes in the Code: Line 49: // Sanitize the ID to allow only alphanumeric, hyphens, and underscores Line 50: $safe_id = sanitize_key($attrs['id']); Line 51: // Sanitize the ID to allow alphanumeric (including uppercase), hyphens, and underscores Line 52: $safe_id = preg_replace('/[^a-zA-Z0-9-]/', '', $attrs['id']); Line 53: // Validate that sanitization didn't remove everything Key Information: The changeset is a security patch for the interactivecalculator plugin. The patch updates the sanitization of the ID attribute to allow alphanumeric characters, hyphens, and underscores, including uppercase letters. The previous sanitization method ( ) was replaced with a regular expression using to ensure only allowed characters are present. The patch also includes a validation step to ensure the sanitization process does not remove the entire ID.