- Protected temporary configuration files with the same PHP guard and access-rule suffix as published configurations, restricted permissions before writing, and rejected incomplete writes.
- Escaped less-than characters as CSS escapes before adding generated inline styles, preventing HTML closing-tag injection while preserving CSS string values.
- Returned completed page responses through an output-buffer callback, preserving scripts, forms, and SVG while keeping escaping at each transformation boundary.
- Removed outdated feature claims and the empty Private Islands panel. Current descriptions no longer advertise Fleet Console, Private Islands, Commerce Safety Lab, or CSS Training Mode.
Release Notes