Added — Inline data:image/* URIs (PNG, JPEG, GIF, WebP, AVIF, SVG) on <img>, <video poster>, <source>, and <track>.
Added — Editors and Authors can now use Unblock without manage_options. Settings moved to a dedicated unblock/v1/settings REST endpoint, filterable via unblock/settings/can_read and unblock/settings/can_write.
Fixed — SVG content and expression operators (>, <) preserved on save.
Fixed — Twig expressions ({{ ... }}) in block content no longer corrupted on save.
Fixed — SVG attribute casing (viewBox, preserveAspectRatio, etc.) and MathML's definitionURL preserved on save.
Added — Inline data:image/* URIs on <img>, <video poster>, <source>, and <track>.
Added — Editors and Authors can now use Unblock without manage_options. Settings moved to a dedicated unblock/v1/settings REST endpoint, filterable via unblock/settings/can_read and unblock/settings/can_write.
Fixed — SVG content and expression operators (>, <) preserved on save.
Fixed — Twig expressions ({{ ... }}) in block content no longer corrupted on save.
Fixed — SVG attribute casing (viewBox, preserveAspectRatio, etc.) and MathML's definitionURL preserved on save.
Fixed — Stale block output with persistent object cache (Redis/Memcached).
Improved — Block sanitization covers all WordPress save paths.
Improved — MathML definitionURL rejects javascript:, data:, and vbscript: schemes at render.