- Changed generated CSS and frontend loaders to use WordPress asset registration, enqueue, and printing functions.
- Bundled the interaction-delay and YouTube loaders as static plugin assets.
- Fixed nested output-buffer handling so WordPress asset printers can run during final HTML optimization.
- Restricted early cache reads to validated local files and rejected paths outside the page-cache directory.
- Kept opt-in JavaScript minification using in-memory processing, WordPress transient storage, and signed external delivery instead of generated JavaScript files. Defer, delay, saved settings, and exclusions remain supported.
- Added safe original-script fallback when cached minified results expire, versioned URLs for source changes, browser caching, and ETag revalidation.
- Audited similar patterns across the plugin: hardened both early drop-in configuration readers and restricted downloaded font output to recognized binary font types with atomic publication.
Release Notes