2.3.0
= 2.3.0 =
- Security: Added capability check to setup wizard endpoint
- Security: Added sanitization to settings saved during setup wizard
- Security: Added escaping to
$_REQUESTparameter in setup modal JavaScript output - Security: Escaped all customizable language string outputs across admin pages
- Security: Replaced raw SQL string concatenation with
$wpdb->prepare()ininsert_single_c() - Security: Added
wp_kses_post()escaping to action dispatcher output