1.1.1

Security

• Only admins can clear the cache now. Before, every logged-in Panel user could clear the cache and the media folder, remove content lock files and reset the login throttling by deleting .logins, even when the Clear cache area was disabled for their role. Please update.
• The clear request no longer accepts crafted folder values. Before, a logged-in Panel user could use it to delete any folder or file the web server can write to.

Fixes

• The success notification shows again after clearing. On Kirby 5 it failed with a JavaScript error.

Upgrade notes

• Other roles need the new owebstudio.clear-cache.clear permission to use the plugin. Add it to their user blueprint:

  permissions:
    owebstudio.clear-cache:
      clear: true

• To hide the plugin from a role, admins included, set access: clear-cache: false in its blueprint.

• Works with Kirby 4 and 5. Replace the plugin folder to update.