Skip to content

Conversation

@XjSv
Copy link
Owner

@XjSv XjSv commented Jan 23, 2026

Description

Please explain the changes you have made here.

Checklist

Please check if your PR fulfills the following requirements:

  • Tested in latest version of WordPress
  • No JavaScript errors or warnings in the console
  • No PHP errors or warnings logs
  • Generate language files, if necessary
  • Extended the README / documentation / etc, if necessary

Note

Introduces substitution support in the ingredient builder and improves recipe browse URL generation.

  • Admin: Adds substitution toggle/fields in #cooked-ingredients-builder with new styles and JS handlers; adjusts select widths and padding for better layout
  • Frontend: Uses browse_page_url as the base for pretty search URLs (supports multilingual prefixes); cleans URL assembly
  • Styles: New frontend .cooked-ingredient-substitution and label styles; mirrored updates in minified assets
  • Metadata: Bumps version to 1.12.0 in CITATION.cff and composer.json; updates SECURITY.md supported versions

Written by Cursor Bugbot for commit 5c0c241. This will update automatically on new commits. Configure here.

XjSv and others added 17 commits November 12, 2025 17:41
- Renamed 'cooked-show-heading-element' to 'cooked-show-substitution'.
- Added 'cooked-has-substitution' logic.
- Changed 'cooked-expanded' to 'cooked-has-substitution'.
- Added Polylang & WPML Support.
- Addressed the CVE-2025-68586 & CVE-2025-62989 security vulnerabilities.
- Added [cooked-next-previous] shortcode documentation in recipe "Shortcodes" tab.
@XjSv XjSv added this to the 1.12.0 milestone Jan 23, 2026
@XjSv XjSv self-assigned this Jan 23, 2026
@XjSv XjSv added bug Something isn't working enhancement New feature or request security Security vulnerability labels Jan 23, 2026
Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

This is the final PR Bugbot will review for you during this billing cycle

Your free Bugbot reviews will reset on February 3

Details

You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

thisParent.find('input[data-ingredient-part="section_heading_element"]').focus();
thisParent.find('input[data-ingredient-part="sub_amount"]').focus();
}
});
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing click handler breaks ingredient heading element toggle

High Severity

The click handler for .cooked-show-heading-element in the ingredient builder was replaced with a new .cooked-show-substitution handler instead of being added alongside it. The .cooked-show-heading-element elements still exist in the HTML templates (in class.cooked-recipe-meta.php at lines 563 and 718) and have CSS styling, but clicking them no longer triggers the expand/collapse behavior because the JavaScript handler was removed. The direction builder still has its handler at line 487, but the ingredient builder's heading element toggle is now broken.

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working enhancement New feature or request security Security vulnerability

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants