Release Notes

What's New

REST API

• Full CRUD REST API for submissions at cf/v1 namespace
• Collection endpoints with pagination, filtering by status/spam/date/search
• Status validation returns proper 400/404 errors

Submission Status Tracking

• New status field: new, read, replied, archived
• Auto-marks submissions as "read" when viewed
• Auto-marks as "replied" after sending a reply
• Bulk status actions in the submissions table
• Status badges in the global submissions view

Conditional Actions

• Run form actions only when field conditions are met
• Operators: equals, not equals, contains, does not contain, is empty, is not empty
• AND logic — all conditions must match for the action to fire

Spam Protection

• Akismet whitelist keywords — bypass spam checks for trusted submissions
• Configurable in Settings → Spam Protection

Quality of Life

• One-click form duplication from the forms list
• Status column included in CSV exports
• Polls database tables now created on activation/migration
• Consistent border-radius across admin UI

Security Fixes

• Escaped all HTML name attributes in condition row output (XSS)
• Added capability check to form duplication handler
• REST API validates status values on update