2026.07.001

First release under the YYYY.MM.VVV version scheme.

• Fixed regex backreference corruption when taglines contain dollar signs (preg_replace → preg_replace_callback)
• Fixed slash handling in the content_save_pre cleanup filter (unslash on entry, re-slash on return)
• Hardened CSV import sanitization (unwrap-then-strip ordering, BOM strip) in both import paths
• Fixed data loss when transforming to the block variation; added accessible names to tagline fields
• Removed dead code (legacy-block check, unused properties); cleared 426 JS / 193 CSS pre-existing lint errors
• Full multi-reviewer audit + cross-model review; details in #1

v2026.03.10

Code Review FIxes

Full 5-reviewer code review surfaced ~30 findings. All priority items fixed:

Critical Fixes

• Removed render_block permission check that silently blocked output in REST/AJAX contexts
• Fixed sanitize_html_class truncating multi-class className values
• Added aria-live to variation render path (was a regression from legacy block)
• Bumped "Requires at least" to 6.3 (apiVersion 3 compatibility)

Architecture Cleanup

• Let block.json handle asset registration (removed manual wp_register_* calls)
• Removed dead frontend.js webpack entry and PHP registration
• Removed empty activation/deactivation hooks
• Moved @wordpress/* packages to devDependencies
• Cleaned up uninstall.php to delete transient and user meta

Code Quality

• Fixed deprecated Button props (isPrimary/isSecondary → variant)
• Fixed useEffect dependency array in legacy edit component
• Capped tagline count at 100 on bulk import append
• Fixed CSV injection sanitization to strip all leading dangerous characters
• Translated block style labels
• Tightened content_save_pre early-return check
• Used version constant instead of hardcoded strings

v1.7.0 - Text Alignment Feature Added

• Added full text alignment controls with left, center, right, and justify options
• Implemented standard WordPress block toolbar alignment buttons
• Added proper text alignment validation and sanitization
• Enhanced CSS styling with explicit text alignment class support
• Improved block compatibility with WordPress theme standards
• Maintains all existing functionality while adding new alignment capabilities

v1.6.1 - Security Hardening Update

This is a critical security update that addresses multiple vulnerabilities and strengthens the overall security posture of the Awesome Random Description Block plugin.

Security Enhancements

Critical Fixes:

• Fixed CSS injection vulnerability with comprehensive input validation
• Enhanced file upload security with strict type, size, and content validation
• Implemented robust input sanitization for all user-provided data
• Added proper capability checks and user permission validation

Additional Security Improvements:

• Enhanced CSV import security with injection prevention measures
• Added comprehensive attribute validation and type checking
• Improved error handling and resource protection mechanisms
• Enhanced information disclosure prevention
• Strengthened output sanitization using WordPress core security functions

Technical Improvements

• Upgraded security validation across all user input points
• Enhanced file handling with multiple security layers
• Improved data validation and sanitization processes
• Strengthened permission and capability verification

Compatibility

• WordPress 5.0+
• PHP 7.4+
• Fully compatible with existing installations
• No breaking changes to functionality

Upgrade Recommendation

This is a security-critical update. All users are strongly encouraged to update immediately to protect their sites from potential security vulnerabilities.

What's Next

This update maintains all existing functionality while significantly improving security. The plugin continues to provide fast, accessible random tagline display with server-side selection and immediate loading.

---

Note: This update focuses entirely on security improvements and does not change any user-facing functionality or features.

v1.6.0 - Major Performance & User Experience Improvements

Version 1.6.0 Release Summary

Major Performance & User Experience Improvements

Version 1.6.0 represents a significant streamlining update that prioritizes performance, user experience, and code maintainability.

Key Changes

Eliminated Flash Effect on Page Load

• Implemented server-side random tagline selection to prevent the visual "flash" where content briefly appeared before being replaced
• Taglines now display immediately upon page load with no visual delay or replacement
• Improved perceived performance and user experience

Complete Animation System Removal

• Removed all animation functionality to create a more efficient, lightweight plugin
• Eliminated JavaScript-heavy animations and DOM manipulation
• Reduced bundle size and improved loading performance
• Simplified codebase for better maintainability

Enhanced Performance Optimizations

• Frontend JavaScript now only loads when the block is actually present on pages
• Reduced unnecessary HTTP requests by 100% on pages without the block
• Achieved 15% reduction in total plugin size
• Streamlined dependencies and removed unused packages

Code Quality & Consistency Improvements

Resolved Naming Inconsistencies

• Fixed all legacy "super-swank" references throughout the codebase
• Updated PHP constants, function names, and class references to use consistent "awesome-random-description" naming
• Corrected data attribute mismatches between PHP and JavaScript components
• Aligned CSS class names across all files

Improved Error Handling & Standards Compliance

• Enhanced PHP error handling with proper null checks and fallbacks
• Updated to full WordPress coding standards compliance
• Implemented robust input sanitization and XSS prevention
• Added comprehensive ABSPATH security checks

Accessibility & Compatibility Enhancements

Better Accessibility Support

• Maintained ARIA live regions for screen readers
• Preserved semantic HTML structure
• Enhanced keyboard navigation support
• Added motion preference support for users who prefer reduced motion

WordPress Standards Compliance

• Full compatibility with Block API v3
• Improved theme integration and compatibility
• Enhanced responsive design across devices
• Better CSS specificity management

Technical Improvements

Optimized Build Process

• Faster build times with streamlined webpack configuration
• Smaller output files with better asset optimization
• Cleaner file structure with unnecessary files removed
• Improved development workflow

Security Enhancements

• Maintained proper file access protection with index.php files
• Enhanced input sanitization for all user inputs
• Secure JSON encoding for data attributes
• Comprehensive security audit compliance

File Structure Cleanup

• Removed legacy zip files and outdated build artifacts
• Eliminated macOS system files (.DS_Store)
• Streamlined package.json with only essential dependencies
• Organized source files for better maintainability

Migration Notes

For Existing Users

• The plugin name has changed since the previous release, so you'll need to set it up again -- export your taglines from the previous block's settings and then re-upload them

For Developers

• Updated API follows WordPress Block API v3 standards
• Consistent naming conventions throughout codebase
• Improved hook structure and filter organization
• Enhanced extensibility for custom implementations

Testing Recommendations

Before deploying to production, verify:

• Random tagline display functions correctly across different themes
• Block editor functionality works as expected
• Performance improvements are evident on pages with and without the block
• Accessibility features function properly with screen readers

Version 1.6.0 delivers a more efficient, accessible, and maintainable plugin while preserving all core functionality that users depend on.