Changelog

Version History

Current v1.0.4
2026-04-24
  • Added looks_like_secret() entropy heuristic — vendor regex (AIza…, sk-…, ghp_…, gho_…, Slack xox…, Bearer …) plus length+char-class fallback with a path/whitespace denylist to prevent URL/slug false-positives.
  • Added Generic key-named fields and ?key= URL params are now gated by the entropy heuristic — closes the n8n Google-API-key pattern (queryParameters.parameters[].name = "key") without false-positives on harmless values.
  • Added Value-entropy fallback in {name, value} pairs — catches custom-header secrets (X-App-Token etc.) whose names cannot be enumerated.
  • Added Redact credentials[].name per node (id retained — it references the n8n DB and is useless without the server).
  • Added Clear meta.instanceId so workflow exports no longer correlate to the originating n8n instance.
  • Added Opt-in tag clearing in wizard step 3. Tags are often harmless but sometimes identifying — the publisher decides per workflow, and the current tag list is shown inline.
  • Added Reason / Key / Note preview table in wizard step 3 — the existing mask_log is now fully visible before publish (collapsible, scrollable for long logs).
  • Fixed Mobile single-finger pan stutter on iOS and Android. Root cause: the browser's default scroll gesture competed with the plugin's pointer listeners. Fixed via touch-action: none on the diagram SVG + a Map-based multi-pointer state machine with { passive: false } listeners.
  • Added Pinch-to-zoom anchored at the finger midpoint and double-tap-to-zoom (toggle 100 ↔ 200 %) on mobile.
  • Fixed Minimap was mouse-only; now responds to tap and drag via pointer events.
  • Changed Intentional trade-off: starting a touch on the diagram SVG blocks page scroll until the finger lifts. Page scroll around the diagram still works as before.
v1.0.3 v1.0.3
2026-04-17
  • Fixed Double workflow rendering when "Easy Table of Contents" (or any plugin that re-runs the the_content filter) is active.
  • Added Shortcode re-entry guard via fingerprint (post id + resolved render settings) — silently skips duplicate passes while preserving legitimate multi-embed with different attributes.
  • Changed Wrapper DOM id is now instance-unique (breznflow-wrap-<POST>-<N>), so multiple embeds of the same workflow in a single post coexist cleanly.
  • Changed Anchor span id="breznflow-<POST>" is emitted only for the first instance per post — keeps the DOM valid and preserves existing share links.
  • Changed View counter now increments after the dedupe check — re-entrant scans no longer double-count views.
  • Added JS renderer tracks mounted containers in a WeakSet — defensive fallback in case server-side dedupe ever misses a case.
  • Added readme.txt: "Learn more" section with links to website, FAQ, and live demo.
v1.0.2 v1.0.2
2026-04-17
  • Fixed WordPress.org plugin review issues addressed.
  • Changed Embed page now uses wp_enqueue_style/wp_enqueue_script with wp_head/wp_footer instead of direct HTML tags.
  • Added Nonce verification to wizard step navigation (steps 2 and 3).
  • Changed Improved input sanitization for $_FILES handling in theme import.
  • Changed Improved JSON input handling with explicit type validation.
  • Added wp_strip_all_tags() escaping for inline CSS in wp_add_inline_style() calls.
  • Added Late escaping (sanitize_key, esc_attr) in custom theme CSS output.
  • Changed Improved phpcs:ignore documentation for public read-only endpoints.
v1.0.1 v1.0.1
2026
  • Fixed WordPress Plugin Check warnings for WordPress.org compliance.
  • Changed Removed deprecated load_plugin_textdomain() call — translations are now loaded automatically by WordPress (since WP 4.6).
  • Changed Prefixed all global template variables in themes.php with breznflow_ for WPCS naming conventions compliance.
v1.0.0 v1.0.0
2026
  • Added Interactive SVG renderer with zoom, pan, and node detail panel.
  • Added 3-step import wizard with JSON validation, URL fetch, and sensitive data masking.
  • Added 86 node type registry with brand colors and icons.
  • Added Shortcode [breznflow] with 13 attributes for mode, zoom, theme, and display toggles.
  • Added Auto-fit zoom for large workflows (configurable threshold, default: 30 nodes).
  • Added Minimap toggle per workflow and via shortcode attribute.
  • Added 5 built-in themes (Dark, Light, Minimal, Tech, Brezn) plus custom theme import via .breznflow.json files.
  • Added Action bar with share, embed, get JSON, and download buttons.
  • Added Embed handler for standalone iframe embedding with dual-gate security.
  • Added Download handler for sanitized JSON export with dual-gate security.
  • Added Two-pass sensitive data masking: URL parameters, header values, and entropy-based condition detection.
  • Added View counter and related workflows by shared node types.
  • Added AI detection badges for workflows containing AI nodes.
  • Added InfoBox node summary (e.g. "3× HTTP Request, 2× Code").
  • Added Schema.org HowTo structured data support.
  • Added Anchor navigation with #breznflow-{id} hash links and 60px scroll offset.
  • Added Custom post type breznflow_workflow with hierarchical breznflow_category taxonomy.
  • Added Complete German translation.
  • Added Zero dependencies — vanilla JavaScript, no external CDN, no tracking.