Release v1.9.9
๐ ๏ธ Changelog
๐ Security
- Hardened receipt/report template file resolution โ the templates REST endpoint now validates the requested template
typeand confirms that resolved template files stay inside the plugin's trusted template directories, closing a path-traversal issue. All stores should update.
๐ Bug Fixes
- POS checkout, receipt and login URLs now follow your site's permalink trailing-slash style, so rewrite rules that force a trailing slash no longer redirect these links to an
httptarget and get blocked as mixed content.
๐งฐ Maintenance
- Updated translations; CI / test-matrix housekeeping.
Stores updating from 1.9.7 also receive the 1.9.8 changes in this release (checkout/receipt/login links respect the Force SSL setting; Force SSL toggle restored under Advanced settings).