SECURITY – Shortcode param is stripped of HTML, the script URL is built safely, and esc_url() is used on output (addresses stored XSS reports for contributor-level shortcode use).
2.1
Release date: 2024-01-01
FIX
Changed textdomain hook to init.
Security fix for shortcode: parameters are properly escaped.
OTHER
Code optimizations.
2.0
Release date: 2020-02-10
TWEAK – Tested with WordPress 5.3 version.
TWEAK – Updated to use a new way to deploy it to wp.org repo.
1.1.0
Changed shortcode name to surbma-bookingcom from booking_com. The old shortcode is still working, but it’s deprecated and it will be removed from the next version.
1.0.3
Tested up to WordPress 4.9 version.
1.0.2
Changed some texts, text domain and function names.