1.2.1

Security

• Save as no longer accepts file names that point outside the page folder. Before, a name like ../../x could write a PNG file anywhere on the server.
• Save and Save as now go through Kirby's own file actions, so they respect the files.create and files.replace permissions, file hooks, the accept rules of your file blueprints and Kirby's content checks. Before, a Panel user could overwrite any file of the page with arbitrary content, including SVG files. Please update.
• Save as no longer overwrites existing files.

Fixes

• Fixed an error 500 on PHP 8.4 and newer when debug mode is on.
• The editor opens again on Kirby 5, and saving over an image no longer ends in an error.
• Save as keeps the image format: JPEG images are saved as .jpg instead of .png.

Upgrade notes

• Panel users now need the files.replace permission to save over an image and the files.create permission to use Save as.
• Copies made with Save as get the same file template as the original, so the template's accept rules apply to them.
• Works with Kirby 4 and 5.
• Replace the plugin folder to update.