Skip to content

v0.4.0 wordpress.org review: address lists switch, sanitized input, refusal inside the plugin

Choose a tag to compare

View all tags
@rafael-minuesa rafael-minuesa released this 10 Oct 07:24
· 22 commits to main since this release
v0.4.0
33b03dc

Answers the first wordpress.org review. Full list in CHANGELOG.md.

  • Address lists switch on the Settings tab, off by default. The Cloudflare ranges and the DuckDuckBot list are downloaded once a day only when it is on. Switch it on after updating if your site relied on the daily download.
  • The wordpress.org build refuses probes and banned addresses inside the plugin. GitHub builds keep the early gate.
  • Every request value the plugin reads is sanitized where it is read. The beacon script and the admin styles are enqueued.
  • The one-time move from the old bsr_ names runs only on sites that ran 0.1.x or 0.2.x.
  • Uninstall deletes everything the plugin stored.
  • The beacon parameter is botstormradar-beacon. The old name is still answered.
Assets 3
Loading