Changelogs

What's Changed

• Added: WOFF and WOFF2 font file uploads now supported in the WordPress media library
• Security: Font uploads validated via binary magic-byte signatures to prevent malicious file uploads

= 1.4.4 = = 1.4.5 = Enables WOFF/WOFF2 font uploads in the media library with magic-byte validation for security.

Commits

• v1.4.5: allow WOFF/WOFF2 font uploads in WordPress media library (7e66ba1)
• fix: suppress PHPCS warnings for uninstall meta_key query and dynamic hook name (d6ca5fb)

What's Changed

Fixed

• Product Review block: Fixed 4 Google Search Console structured data errors: missing price, hasMerchantReturnPolicy, shippingDetails in offers, and missing image fallback.

Added

• Product Review block: New Product Type field — choose between Product (physical/generic) and SoftwareApplication (apps/SaaS) schema types. SoftwareApplication includes applicationCategory and operatingSystem fields.
• Product Review block: New Return Policy field with options: No Returns (digital), Finite Return Window (with configurable days), Unlimited Returns. Maps to hasMerchantReturnPolicy in offers schema.
• Product Review block: New Delivery Type field — Digital (instant/$0 shipping) or Physical. Digital products get zero-cost instant delivery in shippingDetails.
• Product Review block: New Shipping Country field (ISO country code) used for both shipping destination and return policy region.
• Product Review block: Image now falls back to post featured image when no product image is set, preventing GSC "Missing field image" errors.
• Product Review block: Offers schema is now always generated (price defaults to "0" when empty) to prevent GSC missing field warnings.

Commits

• Fix GSC structured data errors and add schema options to Product Review block (37e9980)

Stats

• Commits: 1
• Changes: 4 files changed, 236 insertions(+), 23 deletions(-)

Plugin Info

• Blocks included: 30
• Requires WordPress: 6.0+
• Requires PHP: 7.4+
• Requires: ACF Pro 6.0+ or Secure Custom Fields

Installation

1. Download acf-blocks-plugin-*.zip from the assets below
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the zip file and activate

What's Changed

Commits

• Improve chat block accessibility and fix preview handling (b325332)
• Fix chat block not loading in editor by using nested array example format (7532f12)

Stats

• Commits: 2
• Changes: 4 files changed, 24 insertions(+), 24 deletions(-)

Plugin Info

• Blocks included: 30
• Requires WordPress: 6.0+
• Requires PHP: 7.4+
• Requires: ACF Pro 6.0+ or Secure Custom Fields

Installation

1. Download acf-blocks-plugin-*.zip from the assets below
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the zip file and activate

What's Changed

• Fixed: Schema module filter_article() now skips content with Vue/Alpine.js directives — prevents DOMDocument from corrupting JS framework templates
• Fixed: Block Cleanup module filter_content_cleanup() now skips content with JS framework directives
• Refactored: Extracted Vue-safe DOMDocument guard into shared Has_Dom_Parser trait used by Link Management, Schema, and Block Cleanup
• All three the_content filters that use DOMDocument (priorities 12, 14, 999) are now protected against JS framework corruption

= 1.4.3 = = 1.4.4 = Extends Vue/Alpine.js protection to Schema and Block Cleanup modules. All DOMDocument-based content filters now skip JS framework content.

Commits

• docs: remove changelog from README.md, point to readme.txt (c28993b)
• v1.4.4: extend Vue-safe guard to Schema and Block Cleanup modules (f9b27cc)
• refactor: extract Vue-safe DOMDocument guard into shared trait (f4df469)

What's Changed

• Fixed: Link Management process_content() now skips HTML containing Vue.js directives (v-cloak, v-if, v-show, :class, @click, {{ }})
• Fixed: DOMDocument re-parsing was corrupting Vue/React template syntax in themes like MyListing, causing explore pages to flash and disappear
• Improved: Early-exit check prevents unnecessary DOM parsing on content with JavaScript framework directives

= 1.4.2 = = 1.4.3 = Fixes Link Management breaking pages that use Vue.js (MyListing explore page, etc.). DOMDocument no longer corrupts Vue/React template directives.

Commits

• v1.4.3: fix Link Management breaking Vue.js pages (MyListing explore) (18ca7a3)

What's Changed

• Fixed nonce mismatch bug — trash, restore, and permanent delete actions were failing due to inconsistent nonce prefixes.
• Fixed potential ReDoS vulnerability — removed error suppression on regex pattern matching, added pattern length validation.
• Standardized all nonce prefixes to gtlm_ across admin actions and list table.
• Added REST API route descriptions to all endpoints for better discoverability.
• Added object caching for admin category dropdown with proper invalidation on create, update, and delete.
• Updated readme with free training course, developer reference, REST API guide, and new FAQ entries.

= 1.6.0 = = 1.6.1 = Fixes nonce mismatch bug affecting trash/restore/delete actions, hardens regex pattern validation, adds REST API descriptions and category caching.

Commits

• Add 1.6.1 changelog and upgrade notice to readme (fc0c2af)
• 1.6.1 (c6e0f85)

What's Changed

• Fixed: wp_kses now preserves data-* attributes on <script>, <style>, and <link> tags in Header & Footer snippets
• Fixed: async, defer, nomodule, id, nonce, crossorigin, and as attributes no longer stripped from snippet tags for non-admin users
• Fixed: Unified allowed-tags list between snippet output and save sanitization to prevent attribute drift
• Fixed: README.md version was outdated (still showed 1.4.0)

= 1.4.1 = = 1.4.2 = Fixes data-* and other attributes being stripped from script/style/link tags in Header & Footer snippets for non-admin users.

Commits

• v1.4.2: preserve data-* and module attributes on snippet tags (c2c3da4)

What's Changed

Commits

• Bump version to 2.5.7 (df44467)
• Make acf-innerblocks-container transparent to layout in editor (4a66f2f)
• Remove extra acf-innerblocks-container div from section block frontend (715ea20)
• Fix bugs, security issues, and dead code found in codebase audit (43fc8e5)
• Add Chat block for displaying styled conversations between people (dcf9294)

Stats

• Commits: 5
• Changes: 15 files changed, 297 insertions(+), 53 deletions(-)

Plugin Info

• Blocks included: 30
• Requires WordPress: 6.0+
• Requires PHP: 7.4+
• Requires: ACF Pro 6.0+ or Secure Custom Fields

Installation

1. Download acf-blocks-plugin-*.zip from the assets below
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the zip file and activate

What's Changed

• Added advanced redirects: Direct (prefix-free) and Regex (pattern-based) link modes.
• Direct links redirect without the prefix — e.g., yoursite.com/my-page instead of yoursite.com/go/my-page.
• Regex links match request paths against patterns with capture group substitution in destination URLs.
• New "Enable Advanced Redirects" toggle in Settings (off by default) to opt in.
• Link edit form shows mode selector (Standard / Direct / Regex) with contextual fields.
• Conflict detection warns when direct link paths match existing WordPress posts or pages.
• Regex patterns are validated on save; invalid patterns are rejected.
• List table shows link mode with filter support.
• REST API accepts and returns link_mode, regex_replacement, and priority fields.
• New database columns: link_mode, regex_replacement, priority — fully backwards compatible.

= 1.5.3 = = 1.6.0 = Adds direct (prefix-free) and regex (pattern-based) redirect modes. Enable in Settings > Advanced Redirects. Fully backwards compatible.

Commits

• Add advanced redirects: direct (prefix-free) and regex link modes, bump to 1.6.0 (fc691d9)

What's Changed

• Added: Opt-in "Delete all plugin data when uninstalling" checkbox on the dashboard — removes all options, post metadata, transients, and files on uninstall
• Fixed: Replaced all direct file_put_contents calls with WP_Filesystem API across Task Manager, Redirect Manager, and JSON file creation
• Fixed: Extracted duplicate CSS sanitization into a shared trait used by Components and Fonts modules
• Fixed: Removed sslverify => false from loopback HTTP requests in Assumption Detection
• Fixed: Disabled debug console logging in SVG Icons editor script
• Fixed: Removed dead code in admin UI script

= 1.4.0 = = 1.4.1 = Code quality and plugin review compliance: WP_Filesystem for all file writes, comprehensive uninstall cleanup (opt-in), shared CSS sanitization trait, and minor fixes.

Commits

• v1.4.1: comprehensive uninstall, WP_Filesystem, shared CSS sanitizer, cleanup (20f055f)

What's Changed

Commits

• Bump version to 2.5.6 (b0f8846)
• Remove .flavor-dark from all dark mode selectors across all blocks (2de7c95)

Stats

• Commits: 2
• Changes: 22 files changed, 30 insertions(+), 30 deletions(-)

Plugin Info

• Blocks included: 29
• Requires WordPress: 6.0+
• Requires PHP: 7.4+
• Requires: ACF Pro 6.0+ or Secure Custom Fields

Installation

1. Download acf-blocks-plugin-*.zip from the assets below
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the zip file and activate

What's Changed

Commits

• Improve stats block design, fix pros-cons dark mode, remove prefers-color-scheme across all blocks (52d4d6f)
• Bump version to 2.5.5 (22530f5)
• Fix callout block dark mode: add explicit text colors and dark mode support (ad9aa68)

Stats

• Commits: 3
• Changes: 22 files changed, 102 insertions(+), 24 deletions(-)

Plugin Info

• Blocks included: 29
• Requires WordPress: 6.0+
• Requires PHP: 7.4+
• Requires: ACF Pro 6.0+ or Secure Custom Fields

Installation

1. Download acf-blocks-plugin-*.zip from the assets below
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the zip file and activate