# Changelog - Mux Video WordPress Plugin

All notable changes to this plugin will be documented in this file.

## [1.1.5] - 2026-05-21
### 🟢 Security
- Addressed CVE-2026-7544 reported against 1.1.4.
- Hardened authorization and request validation on internal admin endpoints.
- Improved server-side handling of sensitive integration settings.
- General security hardening across the admin area.

### 🔧 Compatibility & WordPress.org Plugin Check
- "Tested up to" updated to WordPress 7.0.
- Replaced an externally-loaded JavaScript asset with the version already bundled with the plugin.
- Aligned text domains and internal translation handling with WordPress 4.6+ conventions.
- Resolved findings reported by the WordPress.org Plugin Check Plugin.

### 🐛 Fixes
- The "You have unsaved changes" prompt no longer appears after saving Video Security settings.
- Signed-video playback continues to work in the WordPress admin after an allowed domain is added.
- Minor UI and validation fixes in the settings and asset views.

### 🔧 Other
- Plugin version bumped to 1.1.5.

> Detailed remediation notes are kept internally and are not published here in order to avoid providing actionable information to users who have not yet updated.

---

## [1.1.4] - 2025-12-26
### 🐛 Fixes
- Fixed domain validation in Video Security settings: valid domains were incorrectly rejected with "enter a valid domain" error.
- Separated domain format validation from duplicate checking to show appropriate error messages.
- Fixed regex pattern for domain validation to properly handle all alternatives (.local, .test domains).

---

## [1.1.3] - 2025-09-30
### 🟢 Security
- Full **CSRF protection** implemented across all 32 endpoints.  
- Removed unnecessary public `wp_ajax_nopriv` hooks for sensitive actions (5 endpoints secured).  
- SQL injection vulnerabilities fully resolved (`$wpdb->prepare()` + input sanitization).  
- XSS prevention applied consistently across inputs and outputs.  
- Capability checks improved for admin-only actions.  
- File upload validation enforced (MIME type, extension, size).  
- Error handling secured: no sensitive information logged in production.  

### ✨ Improvements
- Optimized performance of Gutenberg Mux block.  
- Enhanced JWT token generation logic to prevent expiration during editing.  
- Extended compatibility with WordPress 6.x.
- Custom video titles: users can add a custom title when uploading a new video.  
- Edit existing titles: modify or add new titles for videos already uploaded in the Asset List.  
- Database storage: all video title data is saved securely in the database.  
- Video search: added search functionality by title or ID in the Asset List.

### 🐛 Fixes
- Corrected asset refresh logic when performing AJAX searches.  
- Resolved `Invalid playback URL` issue after token expiration.  
- Minor editor style adjustments for better UX.  

### 🔧 Other
- Refactored internal functions for better maintainability.  
- Updated plugin documentation (README).  
- **Plugin title changed to "Mux Video Uploader".**

---

## [1.1.2] - 2025-05-15
### ✨ Features
- Initial release with Mux video integration for Gutenberg editor.  
- Support for multiple playback configurations and custom thumbnails.  

### 🐛 Fixes
- Initial minor bug fixes post-launch.  

---

## [1.1.1] - 2025-04-10
### 🐛 Fixes
- Resolved minor compatibility issues with WordPress 6.0+.  

---

## [1.1.0] - 2025-03-20
### ✨ Features
- Added support for JWT-signed playback URLs.  
- Implemented dynamic token regeneration for expired playback tokens.  

---

*For a full history of releases, refer to tags in the repository.*