Gsoft Labs Blocks Compatibility Scanner for WooCommerce

Changelog

1.1.6

• Declared WooCommerce as a required plugin (Requires Plugins: woocommerce).
• Aligned the translation text domain with the WordPress.org plugin slug.
• Hardened shipping-method plugin path detection so it works with both Linux and Windows path separators.
• Translated the test-checkout checklist labels as literal strings so they can be extracted for translation.
• Set the plugin homepage to https://gsoftlabs.com/woocommerceblockscanner/.

1.1.5

• Included composer.json and composer.lock in the distribution package for transparency (the plugin uses Composer’s PSR-4 autoloading; the generated autoloader in vendor/ is now produced by a genuine composer install rather than a hand-written substitute).
• Kept Composer metadata in the package and excluded the Composer executable (composer.phar) from the distribution.
• Clarified the WordPress.org short description so the plugin homepage link lives only in the full Description.

1.1.4

• Declared compatibility with WooCommerce High-Performance Order Storage (custom_order_tables). This plugin never reads or writes order data (it only manages its own settings, scan results, and disposable test pages), so it is safe to declare.

1.1.3

• The Developer Logs export handler now sanitizes wcbcs_export with sanitize_key() at the very first point it is read from $_GET, instead of only checking empty() on the raw superglobal first.

1.1.2

• Removed the remaining inline style attributes (Charts.php, CustomFields.php, Onboarding.php, Dashboard.php, SettingsPage.php). The per-area readiness bar chart now renders as a native <progress> element instead of a dynamically generated inline width.
• The welcome-notice dismiss link and the Developer Logs export handler now explicitly sanitize their $_GET values before use, in addition to the existing nonce/capability checks.
• Removed a leftover no-op array_walk_recursive() call in the log exporter.
• Hardened path handling in the theme scanner so overridden/outdated template paths are always relative (never leak the server’s absolute filesystem layout), with a safe fallback if a path cannot be confidently relativized.

1.1.1

• Shortened the plugin description (header and readme).
• Removed all inline CSS from admin notices; moved to a small dedicated stylesheet.
• Fixed a bug where the uninstaller deleted its own options before reading the test-page IDs it needed to clean up, so test pages were left behind after uninstall.
• Hardened the field-migration REST endpoint: option key/value pairs are now sanitized individually, and REST arguments have explicit validation in addition to sanitization.
• Local source-file scanning now goes through a dedicated safe-reader that requires a .php extension, resolves and verifies the real path is inside an approved plugin/theme directory, checks is_readable(), and no longer suppresses errors with @.
• The “missing required files” admin notice no longer references Composer; end users are told to reinstall the plugin instead (the required files ship inside the plugin ZIP).
• The welcome notice can now be permanently dismissed via a nonce-protected, capability-checked action; it no longer reappears after being dismissed.
• CSV log exports now prefix any cell that starts with =, +, -, or @ with a single quote to prevent spreadsheet formula-injection when opened in Excel/Sheets/LibreOffice.

1.1.0

• Renamed the plugin to Gsoft Labs Blocks Compatibility Scanner for WooCommerce (display name, slug, and text domain) to clearly show it is an independent, unaffiliated tool and avoid confusion with the WooCommerce trademark.
• Removed the “Allow anonymous compatibility statistics” setting — it never actually sent any data, and its presence was misleading. This plugin does not collect or transmit any data.
• Clarified in the readme and Help & Support page that no data ever leaves your site.

1.0.8

• Added: a new “Help & Support” page with a step-by-step guide to every page, an FAQ, and links to documentation and support.

1.0.7

• Fixed: styles and scripts now load correctly on every WB Compat page (they were silently missing on all pages except the Dashboard).
• Changed: redesigned all admin pages with a readiness gauge, a per-area breakdown chart, plain-language “why this matters” messaging, and a beginner-friendly getting-started guide.

1.0.6

• Fixed: migrated custom fields now register correctly on the Blocks checkout (field ID namespace separator was being stripped).
• Fixed: developer log downloads (JSON/TXT/CSV) now work.
• Fixed: onboarding “Start Scan” button now redirects and starts the first scan.

1.0.0

• Initial release.