Nexter Blocks - PRO — about 1 month ago

Improvement : Login & Register : Registration now saves only the form's configured fields, improving data handling and reliability. Improvement : Login & Register : reCAPTCHA is now validated on the server using the stored secret key for more dependable spam protection. Improvement : Login & Register : Added rate limiting to login, forgot-password and magic-link requests to prevent abuse and email flooding. Improvement : Login & Register : Mailchimp and Facebook credentials are now handled entirely on the server and are no longer included in page output. Improvement : Login & Register : Login now returns a uniform message for invalid credentials. Improvement : Google Login : Replaced bundled third-party libraries with a lighter, up-to-date Google sign-in verification method — smaller plugin size and fewer dependencies. Improvement : Form Actions : WebHook, Slack, Discord and CRM actions now validate their target URLs and block internal/private addresses. Improvement : Form Actions : CAPTCHA is now enforced on the server so it can no longer be skipped. Improvement : Dynamic Content : The dynamic-content REST endpoint now returns data only for published posts and authorized users. Improvement : Dynamic Content : Fallback, prefix and suffix text is now properly escaped on output. Improvement : Dynamic Content : ACF field lookups are limited to authorized users and remain safe when ACF is inactive. Improvement : Product Compare : Capped the product-search query size for better performance and stability. Improvement : License : Enabled TLS certificate verification on the license activation request. Improvement : Dashboard : Escaped admin license-notice output and hardened the WDesignKit widget update path against invalid file paths. Improvement : Core : Introduced a unique per-site key for encoding configuration data and added direct-access protection to plugin files. Fix : Cache : Optimized the transient cache-clear query to target only the relevant options instead of scanning the entire options table.