2.1.2

Maintenance release applying the fixes from the WordPress.org plugin review.

Fixed

• Reactivating the plugin over settings left by a 1.x version crashed with a fatal error. The activation hook runs before the plugin's classes are loaded, and the 2.0 migrations it runs use two of them. Activation now loads the classes first.
• The "Switch to Wizard/Advanced Mode" and "View/Hide remaining tasks" buttons chose their label from English button text, so in other languages the label stuck after the first click.
• The logs table did not hide while a reload was in progress.
• The "Cloudflare" badge in the Users list had no styling.
• The version and site URL from an imported settings file are sanitized before being logged.

Changed

• All JavaScript and CSS now loads from files under assets/, enqueued only on the screens that use them, instead of inline <script> and <style> blocks. Translated strings are HTML-escaped where scripts insert them into markup. Backup codes are escaped when listed and printed, and the dashboard's test-connection messages are now translatable.

No settings changes are required. Sites on 2.1.x pick this up through the in-plugin updater.