[MC] Social Profiles 1.1.3

We have released a new maintenace update.

Important change that will affect every add-on:

All of our add-ons are now using Core Library in order to maintain shared helpers and utilities across add-ons for easier maintenance and to keep add-ons cleaner. Core Library also covers our branding for all add-ons in one switch without having to turn it off in every add-on.

This update will require Core Library 1.0.3.

Changes

• The platform icon picker now uses the shared Core Library picker. Live light and dark colour previews are kept, catalog loading retries after a failure instead of hanging, and the Image tab is hidden until a new platform has been saved.
• Uploaded icons no longer trigger a 403 on servers running ModSecurity (OWASP CRS rule 933200) when a platform is saved, exported or imported.
• The "Members by platform" filter now shows a "Select a platform..." prompt instead of an empty option.
• Postbit icons align to the left when messages drop to a single column on narrow screens.

Bug fixes

• Saving a profile value longer than 255 characters showed a server error instead of a validation message.
• Profile and gamer card links encoded spaces as "+" instead of "%20", which broke links for handles containing spaces.

Security

• Platform URL and gamer card patterns must now start with http:// or https://.
• Icon colours are validated before they are written into the page.
• Font Awesome and emoji icons are validated on save, and image icons are limited to uploaded files, http(s) URLs or relative paths.
• These checks apply to platform XML imports as well as the admin form, so an untrusted import file can no longer inject links or styles into public pages.
• Profile links now carry rel="ugc" in addition to nofollow.

Accessibility

• Profile icons have accessible names (for example "Steam: username") for screen readers, with the decorative SVG and emoji hidden.
• Click-to-copy icons are announced as buttons.
• Icons show a visible focus ring for keyboard users, and the gamer card preview opens on keyboard focus as well as hover.
• The gamer card preview respects the reduced motion setting.
• Gamer card images on the profile tab have descriptive alt text.

Performance

• Inline SVG icons are cached for every platform in a single write instead of one write per icon.

We have released a new maintenance update that fixes a critical issue with XenForo 2.3.13. Please update to the latest version before upgrading.

• XenForo 2.3.13 introduces new security measures that caused a fatal error regarding our shared copyright footer.

We have released a new maintenance release with a few bug fixes.

• Adjusted mobile icon placement to be directly under the user details on postbit
• Resolved litespeed/mod security rules blocking data:// path on some client installs.
• Resolved icons alternate icon color not working on certain icons.

We have released a new major version with new features, improvements and bug fixes

New features

• Platform icon picker brought over from Forum Layouts. You may now select from installed FA icons and emoji. As well upload images
  • You can preview icons on white and dark backgrounds
  • Supports live color tinting when selecting the color
• Members by platform allows users with permission to filter users by platform on the members page.
• Privacy controls allows users to choose who gets to see their profiles: All visitors, Members only, People you follow, and Nobody
• Click to copy allows users to copy profiles easily
• ACP user management: Social profiles are now editable directly on the user edit page and searchable as user search criterion. Social profiles admin list now shows how many users have set each profile.

Improvements

• Social profiles now appear in the visitor account menu
• New style property for postbit icon alignment: Left, Center, Right
• You may now restore default profiles
• Platform export now embeds uploaded image bytes, so images transfer across boards easily
• Social profiles are now included in user data exports

Bug fixes

• Member profile tab now does not appear if the user does not have any icons
• Shipped platform icons declare the SVG namespace
• Derived icon fields no longer cache stale values mid-request
• Unified icon color option no longer unifies icons in post bit

We have released version 1.0.1 fixing the following issues:

• Fixed missing template modifications
• Fixed icon colors in member tooltip or member profile not unifying with active profile banners when option is enabled.
• Fixed social icons appearing in profile comment postbit.