Skip to content

v1.6.1

Choose a tag to compare

View all tags
@allinthecode1 allinthecode1 released this 10 Sep 23:15
· 4 commits to main since this release
v1.6.1
1d5ef58

Install by downloading sendbeam.zip below, then Plugins → Add New → Upload Plugin in WordPress.

Requires WordPress 6.1+ and PHP 7.4+. Documentation: https://sendbeam.io/docs/wordpress

Hardening

Messages from an embedded form are now only accepted from the origin serving that form. The listener previously matched on message contents alone, and a form ID is public — so another frame on the same page could resize an embed, or fire the sendbeam:submitted event that sites wire to analytics goals, producing conversions that never happened.

Since 1.5.x

  • A Docs tab in the settings screen: shortcodes with copy buttons, what each API key permission is for, the developer hooks, and links to the full documentation.
  • Uninstall removes everything the plugin stored — five options, four transients and a user-meta key it had been leaving behind, on multisite too. The API key lives in one of those options.
  • The comment opt-in sits above the Post Comment button on any theme, rather than depending on theme code.
  • Pop-ups respect "stay hidden for a week" on the scroll and exit-intent triggers, carry their own headline and copy, and size themselves to the form inside them.
  • Forms take your site's colours, and size themselves to their content.
  • Documentation rewritten against what actually ships, including which API key permissions each feature needs.

Full history in CHANGELOG.md.

Assets 3
Loading