v1.0.2

Security & performance hardening

Security

• Coerce sanitize_options() input to array to prevent a TypeError fatal on empty/non-array submissions
• Use context-appropriate escaping for the GA4 measurement ID output

Performance

• Consolidate four document-level click listeners into one delegated handler
• Cache attribution data instead of re-parsing sessionStorage on every event
• Detach the scroll listener once all depth milestones have fired
• Gate the generic form handler to prevent double-counting in auto-detect mode