← All changes | app/Http/Controllers/IntegrationManagerController.php +7 -0 6.2.11 → 6.2.14 View file →

		@@ -36,8 +36,15 @@
36	36	$this->optionKey = $optionKey;
37	37	$this->settingsKey = $settingsKey;
38	38	$this->priority = $priority;
39	39
	40	+ // GlobalIntegrationService redacts these credentials on read; the option itself must not
	41	+ // be readable raw through the global-settings endpoint, which shares the prefix.
	42	+ add_filter('fluentform/global_settings_denied_option_keys', function ($keys) {
	43	+ $keys[] = $this->optionKey;
	44	+ return $keys;
	45	+ });
	46	+
40	47	// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Constructor, nonce verified in route handlers
41	48	if (isset($_REQUEST['form_id'])) {
42	49	// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Constructor, nonce verified in route handlers
43	50	$formId = (int)$_REQUEST['form_id'];