What's new

This release contains a fix for a security vulnerability discovered by Artyom from CleanTalk on the Optimize Image page that made it possible fo list directories outside the web root. See CHANGELOG for other bug fixes and improvements. All are advised to upgrade immediately.

Changelog

Security fixes

• Fixed a Path Traversal security vulnerability on the Optimize Image page found by Artyom from CleanTalk

Bug fixes

• [LOW] Ensure @imports occurs at the top of critical CSS when files combined.
• [MEDIUM] Fixed Critical JavaScript configure helper broken
• [MEDIUM] Fixed support for APCu cache storage broken

Miscellaneous changes

• Improved simplification of dynamic CSS selectors listed by the Optimize CSS Delivery configure helper.
• Reduce chance of creating multiple duplicate cache