You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.247,
ImprovementsSection of the release
What
The marketplace-add and plugin-install screens now pass marketplace name, plugin version, description, author name and error strings through helpers before display rather than printing them directly, so text that a third-party plugin controls cannot be rendered raw.
Details
Applied uniformly at every display site in both screens.
What the helpers strip beyond normalising the text is not visible from the shipped code.
Evidence
Adding marketplace to configuration\u2026
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
