v1.5.0

Changed

• HTML editor - Toolbar and dialog icons are inline Tabler Icons SVGs; Bootstrap Icons is no longer required
• ImageHelper - Return the original path when the cache directory cannot be created or is not writable, instead of throwing RuntimeException
• ImageHelper - Regenerate a cached image when the source file is newer
• FlagHelper - Omit the default integrity hash when a custom cssPath is set without cssIntegrity; omit integrity and crossorigin when empty
• DateHelper - range() swaps reversed start and end dates
• masonry element - Load imagesLoaded 5.0.0 from jsDelivr instead of an unpinned unpkg URL

Fixed

• SeoHelper - Escape < and > in jsonLd() output so values cannot close the <script> tag
• HTML editor - Drop javascript: and other unsafe URL schemes from pasted HTML and the link and image dialogs; strip event handlers, srcdoc, scripts, and unsafe URLs from HTML loaded from the textarea or source mode
• ImageHelper - Reject paths with .. segments so reads and cache writes stay inside the webroot
• DateHelper - range() renders two times on the same day as a single date
• FlagHelper - Escape the CSS <link> attributes
• lightgallery, masonry, select2, sticksy elements - JSON-encode selectors in inline scripts so quoted selectors work