Repository navigation

Release 3.4.3 - #114

Merged

puikinsh merged 10 commits into

Nov 9, 2026

Merged

Release 3.4.3#114
puikinsh merged 10 commits into
masterfrom
release/3.4.3

Commits on Nov 9, 2026
- Treat data from lightbox links as untrusted
  
  puikinsh
  and
  claude
  committed
  8e773ba
- Restrict caption markup to an allow-list
  
  puikinsh
  and
  claude
  committed
  07d2ddb
- Require a click to open another site's page
  
  puikinsh
  and
  claude
  committed
  8aa4070
- Stop crafted links freezing the page
  
  puikinsh
  and
  claude
  committed
  2a918c4
- Require unfiltered_html to edit script settings
  
  puikinsh
  and
  claude
  committed
  1c37c00
- Update DOMPurify to 3.4.17
  
  puikinsh
  and
  claude
  committed
  d0619c0
- Add inline CSS and JavaScript through the script queues
  
  puikinsh
  and
  claude
  committed
  82321a9
- Resolve Plugin Check findings
  
  puikinsh
  and
  claude
  committed
  b75016b
- Pin the deploy action to a commit
  
  puikinsh
  and
  claude
  committed
  1e0037a
- Release 3.4.3
  
  puikinsh
  and
  claude
  committed
  434573f