4.0.2

Changed

• Route plugin settings through the plugin’s authorized settings controller.

Fixed

• Fixed linked navigation node synchronization failures preventing their source elements from being saved.
• Fixed Dynamic node quick-add forms not showing the selected source’s Section, Category Group, Volume, or Product Type field.
• Fixed Asset nodes pointing to files in subfolders being read-only and unable to be duplicated (#459).
• Fixed braced environment variable syntax in Custom URL nodes being misinterpreted as a node template.
• Fixed a high-severity SQL injection vulnerability.
• Fixed low-severity authorization and preview disclosure vulnerabilities.
• Hardened stored element-condition configuration handling.