Skip to content

v.0.13.0

Choose a tag to compare

@chesio chesio released this 20 Sep 20:22
· 479 commits to master since this release

New features and tweaks:

  • New registrations with username on blacklist are no longer possible [#81]
  • "Error log not publicly accessible" check automatically passes if error log is stored in custom location [#78]
  • All external links now have rel="noreferrer" attribute [#77]
  • New hardening option "Prevent usernames discovery via REST API and username enumeration" have been added [#74]

Removed features:

  • Hardening option "Disable access to REST API to anonymous users" has been removed [#74]

Breaking changes:

  • bc-security/filter:login-username-blacklist filter has been renamed to bc-security/filter:username-blacklist

Other:

  • Fix issues detected by PHPStan [#73] - thanks @szepeviktor!
  • Tested with WordPress 5.2