Release notes

• 6.0.1
• ==============================================================================================================
• * [HIGH] Fixed an authenticated access-control security issue affecting administrative actions. Reported by Artus KG.
• * [HIGH] Hardened settings import validation and processing.
• * [MEDIUM] Added direct capability checks to privileged administrative actions.
• * [MEDIUM] Improved validation of custom CSS settings output.
• Updated the plugin URI metadata to use HTTPS.
• [LOW] Fixed dashboard icon spacing.
• 6.0.0
• ==============================================================================================================
• ^ Redesigned the Dashboard, Configurations, Page Cache and Optimize Images admin pages for the updated WordPress 7.0 admin UI.
• Updated WordPress compatibility metadata to test up to WordPress 7.0 and require at least WordPress 6.7.
• Added dashboard optimization snapshot.
• Added new Dynamic CSS Selectors setting.
• Added Cloudflare development mode edit support.
• Re-added Smart Combine optimized bundling for Pro.
• ^ Improved Optimize CSS Delivery, including dynamic selector handling, pseudo-element support, dynamic hydration scheduling, cache-key stability and stale cache alias handling.
• ^ Improved image optimization and LCP handling, including responsive image width configuration, auto-LCP lazy-load cleanup, retry diagnostics and websocket disconnect handling.
• ^ Refactored page cache architecture and improved page cache list output, cache adapter error messaging and page URL escaping.
• ^ Improved URI handling and validation, including malformed server values, URI candidate transformations and HTTP_HOST hardening.
• [MEDIUM] Fixed JavaScript Configure Helper issues with Smart Combine and container setup.
• [MEDIUM] Fixed lazy-load CSS empty URL handling, multiline URL attributes, failed external combine assets and scoped Bootstrap source map handling.
• [LOW] Fixed Bootstrap toggle focus styling, dashboard icon CSS, dynamic selector detection and Optimize CSS Delivery excluded CSS handling.
• 5.1.4
• ==============================================================================================================
• [HIGH] Fixed issue with plugin sometimes mutating .htaccess files causing errors on some servers.
• More Bootstrap usage on Configurations page.
• 5.1.3
• ==============================================================================================================
• Improve modeswitcher menu
• Use scoped bootstrap to render form elements
• Use selectors to capture crossorigin value on the Preloads tab.
• Added image/avif to htaccess optimization
• Fix bug with processing scripts containing backslashes
• 5.1.2
• ==============================================================================================================
• [HIGH] @font-face broken in some CSS files.
• 5.1.1
• ==============================================================================================================
• Add icons to Admin menu
• Remove unused lazy load settings
• Update WordPress required version to 6.5.0
• Added additional LCP settings
• [HIGH] Fix error on Optimize Image tab
• [MEDIUM] Fix bug with handling invalid image URLs
• ^ Improve Optimize CSS Delivery
• [MEDIUM] Files with integrity attribute were broken
• [LOW] Fix PHP 8.5 deprecations
• 5.1.0
• ==============================================================================================================
• Added support for AVIF images
• Added Cloudflare cache purge integration
• ^ Improved Optimize CSS Delivery to reduce over-inlining and improve FCP and LCP
• ^ Improved Reduce Unused JavaScript feature to reduce the need to exclude files and better optimizations
• Add WP-CRON support for recache feature
• Add option to set sitemap URL for better recache coverage
• Added support for HTTP Request feature in Page Caching to Nginx servers. (Server caching)
• 5.0.1
• ==============================================================================================================
• * Fixed a Path Traversal security vulnerability on the Optimize Image page found by Artyom from CleanTalk.
• Improved simplification of dynamic CSS Selectors listed by the Optimize CSS Delivery configure helper.
• [MEDIUM] Some CSS fonts missing when Reduce Unused CSS is enabled.
• [MEDIUM] Remove @charsets from combined dynamic CSS file
• [LOW] JavaScript error when lazy load background image enabled but none found.
• ^ Improve robustness of Critical JavaScript configure helper
• ^ Don't cache 404 or other invalid pages.
• ^ Improved usability and accuracy of 'Above fold marker' in Miscellaneous Settings and 'Configure helper' in Optimize CSS Delivery. These settings are only visible when 'Debug plugin' is enabled. Please read the descriptions for more information.
• ^ CSS files loaded dynamically in 'Reduce Unused CSS' feature are combined to prevent incremental layout shifts when the user interacts with the page.
• 5.0.0
• ==============================================================================================================
• ^ Implemented new design for Dashboard.
• ^ Separate Image features from CSS features on Dashboard
• ^ Settings 'Include files' in the HTTP/2 Preload and 'Preconnect domains' in Preconnect 3rd part Origins no accept crossorigin attribute values.
• Added settings to lazy load selected images above the fold such as hidden slider images and submenu icons.
• Added settings to exclude sections from the Reduce DOM feature and to include selected DIVs above the fold using id or class.
• ^ Modify default HTML sections in Reduce DOM feature.
• ^ Improvements in the Image Optimization feature and API.
• Limit the amount of font files and images preloaded by the HTTP/2 feature automatically to avoid overloading the critical path.
• 4.2.1
• ==============================================================================================================
• * Fixed security vulnerability with path traversals. See https://patchstack.com/database/report-preview/64f22db8-23d4-4c35-83ee-312a3aa865f6 for details
• [LOW] Sort items on Page Cache tab wasn't working
• CSS loaded asynchronously in the Optimize CSS Delivery feature is placed at the bottom of the page.
• Use the loading attribute to lazy load images instead of JavaScript. JavaScript only used when lazy loading background images and audio/video.
• 4.2.0
• ==============================================================================================================
• [HIGH] Fix fatal error on servers without mbstring support
• [MEDIUM] Backup images were only saved when WEBP images generated
• Add Responsive Image feature
• Added support for resizing WEBP image to create responsive images
• 4.1.2
• ==============================================================================================================
• Add custom CSS setting
• Add setting to disable loading the Critical JavaScript asynchronously
• 4.1.1
• ==============================================================================================================
• Removed support for deprecated Wincache storage.
• ^ Improved event messaging while optimizing images using websockets
• ^ Improved caching to reduce server resource usage.
• [LOW] Couldn't exclude JavaScript with async attributes
• 4.1.0
• ==============================================================================================================
• ^ Minimum PHP version now 8.0
• ^ Improved Optimize image script
• Remove CDN setting Preconnect CDNs
• Remove HTTP/2 setting push CDN files
• Added Preconnect section for third-party origins including CDN
• Add feature to preload LCP images with high fetch priority
• Add setting to easily find the Elements above fold value. Only works if Debug Plugin is enabled.
• 4.0.1
• ==============================================================================================================
• [MEDIUM] Recache didn't work on some servers.
• [HIGH] Full compatibility with Windows broken.
• * Fix security vulnerability with broken access control to settings
• * Fix security vulnerability with the Optimize Image metafile.
• Add setting to ignore query parameter on page cache
• 4.0.0
• ==============================================================================================================
• Minimum PHP version is now PHP 7.4.
• Added separate icon on Dashboard to load WEBP images.
• Added Bulk Settings Operations feature to export, reset, import settings.
• ^ Modified the JavaScript exclude settings to make them more user-friendly.
• ^ Rearranged some settings on the Configurations tab to make them more intuitive
• Added Recache feature.
• Major rewrite of substantial parts of the codes for better performance.
• Numerous bug fixes and improvements.
• 3.2.3
• ==============================================================================================================
• [HIGH] Fix Cross Site Scripting security vulnerability in Configuration tab.
• [MEDIUM] Fix conflict with XML sitemaps when using the Optimize fonts feature.
• ^ Remove loading="lazy" attribute from excluded images in Lazy-load feature.
• 3.2.2
• ==============================================================================================================
• [LOW] Fix PHP error when Clean Cache is accessed from admin menu on some sites.
• [HIGH] Fix PHP error with function utf8_strlen on some sites.
• 3.2.1
• ===============================================================================================================
• Added setting to optionally disable deletion of expired cache.
• Added settings for excluding critical modules in Reduce Unused JavaScript
• [MEDIUM] Some external domains were not being preconnected when Optimize Fonts is enabled.
• [MEDIUM] Imported Google fonts were not being handled properly.
• [MEDIUM] Reduce Unused JavaScript wasn't working properly on some sites.
• 3.2.0
• ===============================================================================================================
• Improve cache management to reduce cache build up on some sites.
• [MEDIUM] Fixed bug with lazy loading audio/video set to autoplay.
• ^ The Optimize Google Fonts feature was expanded to optimize all fonts.
• ^ The HTTP/2 tab on the Options page was changed to Preloads and the Optimize Fonts feature moved to this tab.
• ^ Modules are now also being loaded dynamically in the Reduce Unused Javascript feature.
• Added setting to Lazy-load background images defined in the CSS files to the Lazy-Load feature.
• Added setting to preload JavaScript Modules in the Http/2 Preload feature.
• Added setting to change existing font-display policy to swap. Previously this was only added of font-display was absent.
• Improve method to generate cache key for Optimize CSS Delivery feature to prevent excess generating of cache.
• [MEDIUM] images in elements were not converted to WEBP
• 3.1.0
• ===============================================================================================================
• ^ Minimum required PHP version is now 7.3
• ^ Added support for Brotli compression in .htaccess optimization.
• ^ Added new tab in admin for Page Cache so individual files can be viewed and deleted.
• Added support for different cache storage types (APCu, Memcached, Redis, WinCache) [Pro version]
• New page cache feature to serve static content via HTTP Request without calling PHP to significantly improve server load time. [Pro Version]
• Added 'Remove Unused Javascript' feature [Pro Version]
• 3.0.1
• ===============================================================================================================
• [HIGH] Fix PHP error when using Page Cache.
• 3.0.0
• ===============================================================================================================
• Added Remove javascript/Remove CSS setting
• Added Utility feature to generate new cache hash
• Added Smart Combine feature [Pro version only]
• Added Reduce DOM feature [Pro version only]
• ^ Complete redo of Admin Configuration page to be more user-friendly and aesthetic
• Using icon images instead of font icons on action buttons on dashboard