v3.0.1 - Rendering and AJAX hardening

Simple Budget Plugin v3.0.1

PT-BR

• Endurece a renderizacao de templates do carrinho: agora valida post type, role meta, status do post e permissao de edicao antes de enviar HTML Elementor para o frontend.
• Bloqueia renderizacao publica de templates draft/private; editores ainda conseguem trabalhar com eles.
• Centraliza validacao de produtos, post types permitidos, limite de itens e limite de quantidade no CartRenderer.
• Limita payloads do carrinho no frontend e no servidor para evitar requisicoes excessivas.
• Valida melhor o numero de WhatsApp antes de gerar a URL.
• Remove registro duplicado de assets no loader interno.
• Remove helpers globais mortos e limpa sbp_version no uninstall.

EN-US

• Hardens cart template rendering: post type, role meta, post status, and edit capability are now validated before Elementor HTML is sent to the frontend.
• Blocks public rendering of draft/private templates while still allowing editors to work with them.
• Centralizes product validation, allowed post types, item limits, and quantity limits in CartRenderer.
• Caps cart payloads on both frontend and server to avoid excessive requests.
• Validates the WhatsApp number more strictly before generating the URL.
• Removes duplicated asset registration from the internal loader.
• Removes dead global helpers and clears sbp_version on uninstall.

Validation

• PHP syntax checks passed for changed PHP files in the WordPress container.
• node --check passed for assets/js/sbp-script.js.
• WP-CLI confirmed SBP_VERSION is 3.0.1.
• WP-CLI confirmed cart item and quantity limits.
• WP-CLI confirmed draft templates are blocked for anonymous users, published templates render, and draft templates remain available to editors.
• WP-CLI confirmed invalid configured post types block product validation instead of widening access.
• WP-CLI confirmed active AJAX endpoints remain registered.
• WP-CLI confirmed enqueue_assets is registered once.
• Elementor local version checked: 4.0.8.