Skip to content

v1.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Oct 12:34
· 12 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.2.0
1f55bfd
  • Enable WordPress hardening, disallow unfiltered HTML/uploads and block outbound WordPress HTTP by default in Composer-managed production. Only api.wordpress.org,downloads.wordpress.org are admitted until an operator supplies a complete project-specific allowlist.
  • Preserve explicit supported overrides and the native profile; production doctor rejects unsafe hardening, upload, HTML and outbound-HTTP overrides.
  • Includes the previously unreleased 1.1.4 interpolation-cache, offline Roots installation and production diagnostics fixes listed below.
  • Upgrade note: review API-host needs before deploying. Starter now separates its optional legacy content cleanup from hardening; templates that copy older MU hooks must make the equivalent split before enabling production hardening.
Assets 3
Loading