v1.1.0 Latest
March 20, 2026
Improve 6 Fix 4 Security 3
Improve
- admin reference library now paginates at 50 per page - no more full-table loads for large libraries
- bulk action checkboxes and delete bulk action added to reference table
- import processing moved to admin_init with explicit capability check and transient-based result passing
- settings sanitization - citation_style_kind and footnote_style validated against allowlists
- welcome screen step arrows now use CSS content (RTL-aware) with aria-hidden
- phpcs.xml ruleset added - registers all custom capabilities, excludes vendor directory
Fix
- `_abt_state` post meta now correctly registered for post and page post types, resolving block editor citation sidebar failures
- admin modal missing ARIA dialog attributes - added role="dialog", aria-modal, aria-labelledby, and close button aria-label
- citation block anchor IDs are now unique per block instance (no more duplicate HTML IDs)
- all remaining PHP coding standard errors (Yoda conditions, short ternaries, deprecated current_time, global variable conflicts)
Security
- removed unauthenticated AJAX proxy for OpenCitations and Unpaywall APIs
- SRI (Subresource Integrity) hashes added for Tom Select 2.3.1 CDN assets
- nonce verification moved before all $_POST access in license handler