Skip to content

Version 1.1.0

Choose a tag to compare

View all tags
@dhanushrs1 dhanushrs1 released this 22 Jan 15:59
· 5 commits to main since this release
v1.1.0
9e446e7

Full Changelog: v1.0.2...v1.1.0

🔐 Major Security Enhancements:

  • ✅ Secure File Vault - Files now upload to protected /pwp-secured/ directory
  • ✅ Access Control - .htaccess blocks all direct file access (403 Forbidden)
  • ✅ Role-Based Viewers - Admins can view all files, users only their own
  • ✅ Ownership Verification - Critical security checks prevent unauthorized access
  • ✅ Output Buffer Protection - Prevents file corruption from stray output
  • ✅ Proper MIME Types - Ensures correct file type headers for downloads

🔒 Additional Security Improvements:

  • Fixed PII leak on cached pages
  • Fixed nonce expiry issues
  • Added IP-based rate limiting (10/hour)
  • Safe file deletion with usage checks
  • Admin replies use HTML templates

⚡ Performance:

  • Full caching compatibility (CDN, page cache)
  • Dynamic data loading via JavaScript
  • Reduced server processing

🆕 New Features:

  • Client-side user data population
  • Fresh nonce fetching on page load
  • Customizable rate limits via filter
  • Nginx configuration support for file protection
Assets 2
Loading