v1.2.2

v1.2.2

Security-focused release with 10+ vulnerability fixes, comprehensive utility loader stabilization, i18n expansion, and removal of external image dependencies.

Added

• Local placeholder SVG image: Replaced external placeholder URLs with a local placeholder.svg asset across all blog templates
• THEME_DEVELOPER_GUIDE.md: Comprehensive standalone theme reference documentation
• Language indicator widget: i18n sidebar locale bootstrap with ARIA attributes
• Extended locale support: Arabic, Chinese, French, Russian, Spanish, Indonesian during install
• SidebarNavigationTest: Admin sidebar navigation tests
• MIT license: Added to the blog theme

Security

• SRI integrity hashes on all CSS/JS assets
• Frontend JS hardening with cookie/anchor validation
• XSS prevention in Summernote plugins
• Download identifier sanitization with preg_replace
• Prepared statements for previous/next post queries
• CVE-2026-55766: guzzlehttp/psr7 updated to 2.12.1
• CodeQL scanning extended to PHP

Fixed

• ThemeRenderer DB guard hardened with PDO type check and Throwable catch
• is_table_exists wrapped in function_exists guard
• require_once ordering in generate-request.php
• Session initialization before authenticator include
• ob_start() for front controller output buffering
• Theme directory fallback for missing header.php
• 20+ additional bug fixes across the codebase

Changed

• Utility loader ordering stabilized project-wide
• Translation caches restructured (en, es, id)
• Theme cookie expiry reduced to 30 days

Removed

• restoblog and tastybites themes (not production-ready)

Refactored

• External placeholder URLs removed in favor of local placeholder.svg
• AJAX error handling simplified in comment submission and search

Full changelog: https://github.com/cakmoel/Scriptlog/blob/main/CHANGELOG.md