1.4.2

Consistency

• Systematic escaping in display_results(): $mode_color, $percent, $processed, $stats['total'], $stats['batch_size'], $stats['offset'], $stats['updated'], $stats['skipped'], $stats['errors'], $remaining, $eta_minutes, $eta_sec_remain and $next were interpolated directly in HTML output without intval() or esc_attr(). All internal values with no user input path, but inconsistent with the rest of the plugin which escapes systematically. Fixed with intval() for integers and esc_attr() for attributes
• Unescaped $style in tax rate debug table: hardcoded CSS string output without esc_attr() in admin_page(). Fixed
• Unescaped $diff in tax rate debug table: float difference output without esc_html() while all other values in the same table row were escaped. Fixed with esc_html(number_format(...))
• Loose comparison == for rate selection: $current_rate_id == $rate_id used loose comparison where null == 0 evaluates to true. Replaced with (int) === (int) strict comparison
• Redundant tolerance validation: validate_tolerance() and a manual bounds check were both applied on the same input. Simplified to a single validate_float() call
• Translation file version headers: .pot, fr_FR.po and en_US.po still referenced version 1.4.0 instead of current version