v1.4.0 - Security Hardening, Global Settings & WordPress 7.1 Support

What's Changed in v1.4.0

🔒 Security & WordPress.org Plugin Directory Compliance

• Late Output Escaping Architecture: Enforced context-aware late escaping (esc_html, esc_attr, esc_url, wp_kses) strictly at the point of output across all rendered HTML, attributes, and URLs to satisfy WordPress review standards.
• Accent Color Sanitization: Added strict validation for accent colors via sanitize_hex_color() / sanitize_text_field() to prevent arbitrary CSS injection.

⚙️ Global Plugin Settings

• Added a new settings dashboard under Settings → Credits (options-general.php?page=credits-shortcode) with WordPress native color pickers (wp-color-picker) allowing site administrators to configure site-wide default credit types and accent colors.
• Added uninstall.php for clean option cleanup on deletion.

🧩 Gutenberg Block & Theme Enhancements

• Switched block registration to register_block_type_from_metadata() using modern block.json (API v3).
• Gutenberg block editor dynamically inherits default styling and localized strings via wp.i18n and wp_localize_script.

🧪 Test Suite & CI/CD

• Added comprehensive PHPUnit test suite (32 unit & security tests, 143 assertions) covering renderer sanitization, security edge cases, and settings validation.
• Added GitHub Actions automated CI workflow.

📋 Compatibility

• Requires at least: WordPress 5.0
• Tested up to: WordPress 7.1
• Requires PHP: 7.4+

v1.3.0 - Gutenberg Block & Accent Color Controls

Credits Shortcode & Block Plugin v1.3.0

🌟 What's New in v1.3.0

• 🧩 Native Gutenberg Block Editor Support (credits/shortcode): Insert credits directly using a native WordPress block (/credits) with live visual editor previews.
• 🎨 Custom Accent Color Controls: Customize badge background color, link background color, and link text color directly from the Block Editor sidebar or shortcode parameters (badge_color, link_color, link_text_color).
• ✨ Micro-Interaction Hover Effects: Smooth 0.2s CSS transitions with hover elevation and brightness shifts.
• 📐 Block Layout Specificity Fixes: Auto-adapts to modern WordPress block themes (Twenty Twenty-Four, Twenty Twenty-Five) to sit 100% flush with paragraph content.
• 🔒 CVE-2026-6256 Security Hardening: Sanitized inputs (esc_url(), esc_html()) protecting against Stored XSS vulnerabilities.
• 📋 Complete Plugin Headers: Added official WordPress header tags (Requires at least: 5.0, Requires PHP: 7.4, Tested up to: 6.7).
• 🔄 100% Backward Compatible: Legacy shortcodes [credits] and Classic Editor TinyMCE toolbar buttons continue to render seamlessly.

---

📦 Installation

Download credits-shortcode-v1.3.zip below and upload via WordPress Admin > Plugins > Add New > Upload Plugin.