a:2:{s:7:"timeout";i:1692577004;s:5:"value";s:48776:"{"new_version":"7.0.4","stable_version":"7.0.4","name":"Really Simple SSL pro","slug":"really-simple-ssl-pro","url":"https:\/\/really-simple-ssl.com\/downloads\/really-simple-ssl-pro\/?changelog=1","last_updated":"2023-08-14 10:55:41","homepage":"https:\/\/really-simple-ssl.com","package":"","download_link":"","sections":{"description":"<p>Really Simple SSL Pro offers premium support, HTTP Strict Transport Security, an extensive scan, and more detailed feedback on the configuration page.<\/p>\n<h4> Installation <\/h4>\n<ul>\n<li>Install the Really Simple SSL plugin, which is needed with this one.<\/li>\n<li>Go to \u201cplugins\u201d in your Wordpress Dashboard, and click \u201cadd new\u201d<\/li>\n<li>Click \u201cupload\u201d, and select the zip file you downloaded after the purchase.<\/li>\n<li>Activate<\/li>\n<li>Navigate to \u201csettings\u201d, \u201cSSL\u201d.<\/li>\n<li>Click \u201clicense\u201d<\/li>\n<li>Enter your license key, and activate.<\/li>\n<\/ul>\n<p>For more information: go to the <a href=\"https:\/\/www.really-simple-ssl.com\/\">website<\/a>, or\n<a href=\"https:\/\/www.really-simple-ssl.com\/contact\/\">contact<\/a> me if you have any questions or suggestions.<\/p>","changelog":"<h4> 7.0.4 <\/h4>\n<ul>\n<li>August 8th 2023<\/li>\n<li>New: Advanced hardening: block admin creation<\/li>\n<li>Improvement: WordPress tested up to 6.3<\/li>\n<\/ul>\n<h4> 7.0.3 <\/h4>\n<ul>\n<li>July 25th 2023<\/li>\n<li>Improvement: catch not existing 'SERVER_PROTOCOL'<\/li>\n<\/ul>\n<h4> 7.0.2 <\/h4>\n<ul>\n<li>July 6th 2023<\/li>\n<li>Improvement: prevent use of subdirectories in custom login url<\/li>\n<\/ul>\n<h4> 7.0.1 <\/h4>\n<ul>\n<li>Fix: change login url functionality not working in 7.0<\/li>\n<\/ul>\n<h4> 7.0.0 <\/h4>\n<ul>\n<li>New: Vulnerability Detection is in Beta - <a href=\"https:\/\/really-simple-ssl.com\/vulnerability-detection\/\">Read more<\/a><\/li>\n<\/ul>\n<h4> 6.2.5 <\/h4>\n<ul>\n<li>Improvement: stop trying the database rename if it fails on first attempt<\/li>\n<\/ul>\n<h4> 6.2.4 <\/h4>\n<ul>\n<li>New: change login url<\/li>\n<li>Fix: Exclude deprecated x-content-security-policy from header detection<\/li>\n<li>Improvement: Update to functional components Rest API for free core<\/li>\n<li>Improvement: Disable Content Security Policy if the maximum header size has been reached<\/li>\n<\/ul>\n<h4> 6.2.3 <\/h4>\n<ul>\n<li>Fix: rename db prefix using not available function<\/li>\n<li>Fix: Exclude deprecated x-content-security-policy from header detection<\/li>\n<\/ul>\n<h4> 6.2.2 <\/h4>\n<ul>\n<li>Fix: follow redirects in third party header detection.<\/li>\n<\/ul>\n<h4> 6.2.1 <\/h4>\n<ul>\n<li>Fix: prefix replacement in wp-config too broad, causing issues if wp_ is used other then in the prefix.<\/li>\n<li>Fix: Update prefix site_id in user roles when changing the database prefix, to preserve capabilities for users in subsites<\/li>\n<\/ul>\n<h4> 6.2.0 <\/h4>\n<ul>\n<li>Improvement: add support for BLOB and Filesystem<\/li>\n<li>Improvement: disable CSP reporting mode paused status when switching to disabled or enforced<\/li>\n<\/ul>\n<h4> 6.1.1 <\/h4>\n<ul>\n<li>Improvement: Use ABSPATH constant instead of path when writing path to debug.log<\/li>\n<li>Improvement: Pause CSP reporting after 20 requests, to lower server load<\/li>\n<li>Fix: script-src-elem in Content Security Policy not including source URL<\/li>\n<\/ul>\n<h4> 6.1.0 <\/h4>\n<ul>\n<li>Improvement: CSP policy for back and front-end separate<\/li>\n<li>Improvement: also allow non-recommended X-XSS options<\/li>\n<li>Improvement: frame ancestors allow other values than 'none'<\/li>\n<\/ul>\n<h4> 6.0.5 <\/h4>\n<ul>\n<li>Fix: Debug.log setting not saving on first save action<\/li>\n<\/ul>\n<h4> 6.0.4 <\/h4>\n<ul>\n<li>New: automatically detect wrong Security Header values from other sources, and duplicate headers<\/li>\n<li>Improvement: auto enable Insecure Requests header only when SSL enabled<\/li>\n<li>Improvement: remove unnecessary notices load in licenses block<\/li>\n<\/ul>\n<h4> 6.0.3 <\/h4>\n<ul>\n<li>Fix: isset check on $_SERVER['HTTPS'] to support environments where this key is missing<\/li>\n<li>Improvement: add headers_sent() check for situations where the headers already have been sent, possibly due to an error earlier in the system.<\/li>\n<li>Improvement: Update CSP reporting URI on permalink structure change<\/li>\n<\/ul>\n<h4> 6.0.2 <\/h4>\n<ul>\n<li>Fix: HSTS not running on hosting environments with load balanced configuration because SSL is not detected<\/li>\n<li>Fix: when wp-config.php is not writable, renaming database prefix could cause tables to get removed<\/li>\n<\/ul>\n<h4> 6.0.1 <\/h4>\n<ul>\n<li>Fix: upgrade to 6 logic running more than once<\/li>\n<\/ul>\n<h4> 6.0.0 <\/h4>\n<ul>\n<li>Tested up to WordPress 6.1.0<\/li>\n<li>Improvement: User Interface<\/li>\n<li>New: Server Health Check - powered by SSLLabs<\/li>\n<li>New: WordPress Hardening Features<\/li>\n<\/ul>\n<h4> 5.4.0 <\/h4>\n<ul>\n<li>Improvement: New default Referrer Policy =&gt; strict-origin-when-cross-origin<\/li>\n<li>Improvement: New default for X-XSS header<\/li>\n<li>Improvement: Dropped Expect-CT header as it's now deprecated, integrated by default in certificates<\/li>\n<li>Improvement: Updated Permissions Policy with improved defaults, updated to new values as currently supported in browsers<\/li>\n<li>Improvement: dropped access-control-allow-origin header, as it can only be used dynamically, which is not feasible in most WP environments<\/li>\n<\/ul>\n<h4> 5.3.6 <\/h4>\n<ul>\n<li>Improvement: new languages<\/li>\n<li>Improvement: several small bug fixes and typo's<\/li>\n<\/ul>\n<h4> 5.3.5.1 <\/h4>\n<ul>\n<li>Fix: new license check causing continuous license checking, resulting in slow response<\/li>\n<\/ul>\n<h4> 5.3.5 <\/h4>\n<ul>\n<li>Improvement: language files<\/li>\n<li>Improvement: some small bug fixes<\/li>\n<\/ul>\n<h4> 5.3.4 <\/h4>\n<ul>\n<li>Improvement: language files<\/li>\n<li>Changed: license check using own transient function<\/li>\n<\/ul>\n<h4> 5.3.3 <\/h4>\n<ul>\n<li>Removed credentialless from CORP setting as it caused some issues with embedded videos<\/li>\n<\/ul>\n<h4> 5.3.2 <\/h4>\n<ul>\n<li>Fix: PHP &lt;7 compatibility<\/li>\n<\/ul>\n<h4> 5.3.1 <\/h4>\n<ul>\n<li>Improvement: fix site health still showing header notice if activated in pro<\/li>\n<li>Improvement: set ssl verify to false on failed license check<\/li>\n<li>Improvement: improved CORS settings<\/li>\n<\/ul>\n<h4> 5.3.0 <\/h4>\n<ul>\n<li>Improvement: add support for report-to in CSP<\/li>\n<li>Improvement: increase CSP display limit<\/li>\n<li>Improvement: auto update option<\/li>\n<\/ul>\n<h4> 5.2.5 <\/h4>\n<ul>\n<li>Improvement: add direct link to permalinks when permalinks notice pops up<\/li>\n<li>Fix: navigation in scan overview<\/li>\n<\/ul>\n<h4> 5.2.4 <\/h4>\n<ul>\n<li>Improvement: feedback on not detected headers<\/li>\n<\/ul>\n<h4> 5.2.3.1 <\/h4>\n<ul>\n<li>Fix: Rest API and pretty permalinks check inverted, causing false positive notification in dashboard about the permalink structure<\/li>\n<\/ul>\n<h4> 5.2.3 <\/h4>\n<ul>\n<li>Improvement: various Content Security Improvements: added override to 20 reporting\/100 display limit. Fixed CSS when 100+ pages<\/li>\n<li>Improvement: added default required WordPress rules to Content Security Policy<\/li>\n<li>Improvement: fixed advanced header warning position<\/li>\n<li>Disable scan on invalid license<\/li>\n<li>Improvement: moved recommended security headers notice to free, added override in Pro<\/li>\n<li>Added Cross-Origin resource policy security headers<\/li>\n<\/ul>\n<h4> 5.2.2 <\/h4>\n<ul>\n<li>Fix: double quotes in php headers causing issues since recent browser updates<\/li>\n<\/ul>\n<h4> 5.2.1 <\/h4>\n<ul>\n<li>Improvement: replaced admin notice on inactivate license<\/li>\n<li>Improvement: move security headers above WP Rocket .htaccess rules to prevent compatibility issues<\/li>\n<li>Improvement: enable auto updates<\/li>\n<li>Improvement: Content Security Policy did not allow for wss:\/\/ and ws:\/\/ web socket protocol<\/li>\n<li>Improvement: removed trailing slash from rest api<\/li>\n<li>Improvement: added rsssl_pause_after_request_count filter to adjust request count on which CSP pauses<\/li>\n<li>Improvement: fixed some reporting variations<\/li>\n<\/ul>\n<h4> 5.2.0 <\/h4>\n<ul>\n<li>Improvement: changed PHP header option to dropdown<\/li>\n<li>Improvement: remove unnecessary parameter in file scan<\/li>\n<li>Improvement: request header origin sometimes returns null. Changing to 'host' resolves the Content Security Policy reporting API in those cases<\/li>\n<li>Improvement: styling issue on scan UX<\/li>\n<\/ul>\n<h4> 5.1.0 <\/h4>\n<ul>\n<li>Improvement: comment on multisite environments caused layout issue<\/li>\n<\/ul>\n<h4> 5.0 <\/h4>\n<ul>\n<li>Updated translations<\/li>\n<\/ul>\n<h4> 4.1.11 <\/h4>\n<ul>\n<li>Fix: for very long .htaccess files, support form in the plugin gave an invalid response. props Vincent<\/li>\n<\/ul>\n<h4> 4.1.10 <\/h4>\n<ul>\n<li>Fix: typo in reset license key obfuscation<\/li>\n<li>Translations update<\/li>\n<\/ul>\n<h4> 4.1.9 <\/h4>\n<ul>\n<li>Improvement: 'none' or '*' attribute deprecated for Permissions Policy<\/li>\n<li>Improvement: Content Security Policy for unsafe inline<\/li>\n<li>Improvement: Interest Cohort added to permissions policy<\/li>\n<\/ul>\n<h4> 4.1.8 <\/h4>\n<ul>\n<li>Fix: PHP headers were set with quotes, causing issues on some servers.<\/li>\n<li>Fix: When switching from &quot;enforce&quot; to &quot;paused&quot;, CSP headers were not removed<\/li>\n<li>Improvement: generalized wrap_header function for more robust header generation<\/li>\n<li>Improvement: disable remove .htaccess headers on activation of PHP headers.<\/li>\n<\/ul>\n<h4> 4.1.7 <\/h4>\n<ul>\n<li>Moved secure cookies to free<\/li>\n<\/ul>\n<h4> 4.1.6 <\/h4>\n<ul>\n<li>Improved WP Engine compatibility<\/li>\n<li>Improved Content Security Policy, added option to revoke result from overview<\/li>\n<li>Lowered Content Security Policy request limit<\/li>\n<\/ul>\n<h4> 4.1.5 <\/h4>\n<ul>\n<li>Fix: set defaults firing even when dependency check not validated<\/li>\n<li>Fix: Constant RSSSL_DOING_CSP not set when running the CSP API<\/li>\n<\/ul>\n<h4> 4.1.4 <\/h4>\n<ul>\n<li>Improvement: Added report-paused mode to Content Security Policy generator. Reporting will now automatically pause after 200 requests to prevent high server load<\/li>\n<li>Improvement: Further restricted access to Content Security Policy generator REST API calls<\/li>\n<li>Fix: Default options won't be reconfigured after plugin deactivation\/activation<\/li>\n<\/ul>\n<h4> 4.1.3 <\/h4>\n<ul>\n<li>Made PHP header option available on all configurations<\/li>\n<li>Improvement: wrap example code in comments<\/li>\n<\/ul>\n<h4> 4.1.2 <\/h4>\n<ul>\n<li>Fix: File name in upgrade function<\/li>\n<\/ul>\n<h4> 4.1.1 <\/h4>\n<ul>\n<li>Fix: condition for .htaccess writing in combination with do not edit .htaccess option<\/li>\n<\/ul>\n<h4> 4.1.0 <\/h4>\n<ul>\n<li>New: PHP headers support for all security headers, autodetecting necessity for NGINX.<\/li>\n<li>New: Changed feature policy into permissions policy.<\/li>\n<\/ul>\n<h4> 4.0.7 <\/h4>\n<ul>\n<li>Fix: always activate multisite license for main site url<\/li>\n<\/ul>\n<h4> 4.0.6 <\/h4>\n<ul>\n<li>Improvement: moved renamed free folder notice to free plugin<\/li>\n<li>Improvement: PHP 8 compatibility<\/li>\n<\/ul>\n<h4> 4.0.5 <\/h4>\n<ul>\n<li>Improvement: 404 redirect check expiration set to one year when test is successful<\/li>\n<\/ul>\n<h4> 4.0.4 <\/h4>\n<ul>\n<li>Fix: hsts header on multisite not saving<\/li>\n<\/ul>\n<h4> 4.0.3 <\/h4>\n<ul>\n<li>Fix: network settings link<\/li>\n<li>Fix: multisite hsts preload option not saving<\/li>\n<li>Improvement: License notifications. Differ between remaining activations when current site is activated, and when not.<\/li>\n<\/ul>\n<h4> 4.0.2 <\/h4>\n<ul>\n<li>Improvement: exclude .htaccess from edits outside settings page<\/li>\n<\/ul>\n<h4> 4.0.1 <\/h4>\n<ul>\n<li>Fix: decode license for support ticket<\/li>\n<li>Fix: made some untranslatable strings translatable<\/li>\n<\/ul>\n<h4> 4.0.0 <\/h4>\n<ul>\n<li>New user interface<\/li>\n<li>Fix: transient stored with 'WEEK_IN_SECONDS' as string instead of constant<\/li>\n<li>Improvement: notices dashboard, with dismissable notices<\/li>\n<li>Improvement: improved naming of settings, and instructions<\/li>\n<li>Improvement: new translations<\/li>\n<li>Improvement: new fix options in scan<\/li>\n<li>Fix: scan mixed content detection false positive<\/li>\n<li>Improvement: removal of .htaccess lines and wpconfig lines on deactivation<\/li>\n<li>Fix: CSP generation bug for some types<\/li>\n<li>Fix: is_writable check on secure cookies write<\/li>\n<li>Improvement: do not insert default security headers if SSL not enabled yet<\/li>\n<\/ul>\n<h4> 2.1.21 <\/h4>\n<ul>\n<li>Fix: return after htaccess is not writable<\/li>\n<\/ul>\n<h4> 2.1.20 <\/h4>\n<ul>\n<li>Improvement: add env=https based on apache version, if available.<\/li>\n<li>Improvement: fix both www and non www URL's in elementor<\/li>\n<\/ul>\n<h4> 2.1.19 <\/h4>\n<ul>\n<li>Added upgrade script to move HSTS header to security headers block<\/li>\n<li>Prefixed Elementor URL replace option<\/li>\n<li>Updated NGINX\/PHP security header notice<\/li>\n<li>Added function_exists() checks<\/li>\n<li>Add style-src-elem and script-src-elem to Content Security Policy<\/li>\n<li>Improved TLS version check to prevent cURL errors on some setups<\/li>\n<\/ul>\n<h4> 2.1.18 <\/h4>\n<ul>\n<li>Fix: check if uses_elementor function exists<\/li>\n<\/ul>\n<h4> 2.1.17 <\/h4>\n<ul>\n<li>Fix: check 404 homepage redirect issue only on settings page<\/li>\n<\/ul>\n<h4> 2.1.16.1 <\/h4>\n<ul>\n<li>Fixed a bug where having allow_url_fopen = 0 in the PHP configuration could cause a PHP warning on the Really Simple SSL dashboard<\/li>\n<\/ul>\n<h4> 2.1.16 <\/h4>\n<ul>\n<li>Added a TLS version check<\/li>\n<li>Added a check for a redirect to homepage which can cause mixed content errors on image<\/li>\n<\/ul>\n<h4> 2.1.15<\/h4>\n<ul>\n<li>Automatically fix mixed content in Elementor by calling the Elementor replace_urls() function<\/li>\n<\/ul>\n<h4> 2.1.14 <\/h4>\n<ul>\n<li>Added Permissions Policy security header<\/li>\n<\/ul>\n<h4> 2.1.13 <\/h4>\n<ul>\n<li>Removed env=HTTPS from HSTS preload header as it's not required anymore<\/li>\n<\/ul>\n<h4> 2.1.12 <\/h4>\n<ul>\n<li>Fixed a bug where the SSL page could not be opened on multisite installations<\/li>\n<\/ul>\n<h4> 2.1.11 <\/h4>\n<ul>\n<li>Fixed some untranslatable strings in security headers help tips<\/li>\n<li>Added German formal translations thanks to Thorsten Wollenh\u00f6fer<\/li>\n<\/ul>\n<h4> 2.1.10 <\/h4>\n<ul>\n<li>Removed error logging from CSP class<\/li>\n<\/ul>\n<h4> 2.1.9 <\/h4>\n<ul>\n<li>Fixed a bug where the rest route wouldn't initialize<\/li>\n<\/ul>\n<h4> 2.1.8 <\/h4>\n<ul>\n<li>Fixed a bug which could prevent the Content Security Policy generator endpoint from working on specific setups with a site in a subfolder<\/li>\n<\/ul>\n<h4> 2.1.7 <\/h4>\n<ul>\n<li>Tested with WordPress 5.3<\/li>\n<\/ul>\n<h4> 2.1.6 <\/h4>\n<ul>\n<li>Enabled some security headers by default.<\/li>\n<li>Show HSTS preload option after enabling HSTS option without reloading page<\/li>\n<li>Updated support tab to pre-fill fields on really-simple-ssl.com, directly sending from support tab resulted in some undelivered e-mails<\/li>\n<\/ul>\n<h4> 2.1.5 <\/h4>\n<ul>\n<li>Improved license request caching on settings page<\/li>\n<\/ul>\n<h4> 2.1.4 <\/h4>\n<ul>\n<li>Improved support tab request processing<\/li>\n<\/ul>\n<h4> 2.1.3 <\/h4>\n<ul>\n<li>Fix: fixed a bug where an empty regex matching group produced false positive http:\/\/ scan results<\/li>\n<\/ul>\n<h4> 2.1.2 <\/h4>\n<ul>\n<li>Added right-to-left text support<\/li>\n<li>Scan error is now dismissible<\/li>\n<li>Fix: certificate valid to date now only shows when the corresponding option has been enabled<\/li>\n<\/ul>\n<h4> 2.1.1 <\/h4>\n<ul>\n<li>Fix: no check for CSP violations when CSP not enabled.<\/li>\n<\/ul>\n<h4> 2.1 <\/h4>\n<ul>\n<li>Added Content Security Policy Generator<\/li>\n<li>Added security headers<\/li>\n<li>Fix: moved emptying of results in blocked url's outside of loop<\/li>\n<li>Added Danish, Hungarian and Polish languages<\/li>\n<\/ul>\n<h4> 2.0.24 <\/h4>\n<ul>\n<li>Tweak: added support for Bitnami\/AWS htaccess.conf<\/li>\n<li>Tweak: updated support notice to send an e-mail manually after no response for 24 hours<\/li>\n<\/ul>\n<h4> 2.0.23 <\/h4>\n<ul>\n<li>Tweak: added notices in license tab<\/li>\n<li>Tweak: admin notices will no longer show in Gutenberg edit screen<\/li>\n<li>Tweak: added visual feedback when fixing a scan results item<\/li>\n<li>Tweak: added notice when free plugin has been renamed<\/li>\n<li>Tweak: removed untraceable results from scan results<\/li>\n<li>Tweak: blog count fix for multi-networks<\/li>\n<\/ul>\n<h4> 2.0.22 <\/h4>\n<ul>\n<li>Tweak: added caching to redirect_to_http() function to prevent timeouts.<\/li>\n<li>Tweak: updated Portuguese translations.<\/li>\n<\/ul>\n<h4> 2.0.21 <\/h4>\n<ul>\n<li>Fix: fixed a bug in the redirect_to_http() function.<\/li>\n<\/ul>\n<h4> 2.0.20 <\/h4>\n<ul>\n<li>Added support tab<\/li>\n<li>Tweak: improved mixed content scan regexes<\/li>\n<li>Tweak: added a redirect to http:\/\/ check before activating SSL<\/li>\n<\/ul>\n<h4> 2.0.19 <\/h4>\n<ul>\n<li>Fix: fixed a bug where ignored url's were being added to the ignored url's array, even if they were already present.<\/li>\n<li>Tweak: the \/plugins\/, \/wp-admin\/ and \/wp-includes\/ directories have been excluded from the scan to increase performance.<\/li>\n<\/ul>\n<h4> 2.0.18 <\/h4>\n<ul>\n<li>Fix: html closure in activation message<\/li>\n<\/ul>\n<h4> 2.0.17 <\/h4>\n<ul>\n<li>Tweak: removed background running of scan<\/li>\n<li>Tweak: removed HTML from translatable strings<\/li>\n<\/ul>\n<h4> 2.0.16 <\/h4>\n<ul>\n<li>Tweak: updated notices to be in line with free notices<\/li>\n<\/ul>\n<h4> 2.0.15 <\/h4>\n<ul>\n<li>Tweak: when the scan is finished it shows the text Scan Finished and the progress bar turns green.<\/li>\n<li>Fix: improved external css and js detection regex<\/li>\n<\/ul>\n<h4> 2.0.14 <\/h4>\n<ul>\n<li>Fix: run javascript only on own settings page<\/li>\n<li>Fix: ajax url on some functions not correct<\/li>\n<li>Fix: scan results only outputting after a refresh<\/li>\n<\/ul>\n<h4> 2.0.13 <\/h4>\n<ul>\n<li>Tweak: updated the scan cron to prevent it from running without first starting the scan manually<\/li>\n<\/ul>\n<h4> 2.0.12 <\/h4>\n<ul>\n<li>Updated the scan functionality to use cron<\/li>\n<\/ul>\n<h4> 2.0.11 <\/h4>\n<ul>\n<li>Added scan support for the wp_postmeta table<\/li>\n<li>Fix: the show ignored URL's option now works correctly<\/li>\n<\/ul>\n<h4> 2.0.10 <\/h4>\n<ul>\n<li>Fix: certificate expiration warning showed even when cert is still a long period valid if no valid response is received.<\/li>\n<li>Fix: config screen still showing error while not blocked URL's were left, because a 0 == 'string' comparison return true.<\/li>\n<\/ul>\n<h4> 2.0.9 <\/h4>\n<ul>\n<li>Fix: the plugin will no longer scan its own folder for mixed content<\/li>\n<li>Fix: the scan now contains a number of common false positives in the $safe_domains array to prevent them showing up in the scan<\/li>\n<\/ul>\n<h4> 2.0.8 <\/h4>\n<ul>\n<li>Fix: added a notice when the HSTS header is set using PHP on NGINX servers<\/li>\n<\/ul>\n<h4> 2.0.7 <\/h4>\n<ul>\n<li>Fix: fixed a bug where the $has_result in the external CSS and JS scan was set to true when there were no results<\/li>\n<\/ul>\n<h4> 2.0.6 <\/h4>\n<ul>\n<li>Tweak: added a warning when inserting HSTS headers via PHP<\/li>\n<\/ul>\n<h4> 2.0.5 <\/h4>\n<ul>\n<li>Fix: deleted unnecessary transient delete<\/li>\n<\/ul>\n<h4> 2.0.4 <\/h4>\n<ul>\n<li>Added support for Widgets in the mixed content scan<\/li>\n<li>Tweak: changed icon classnames from icon to rsssl-icons<\/li>\n<\/ul>\n<h4> 2.0.3 <\/h4>\n<ul>\n<li>Tweak: option to disable flushing of rewrite rules on activation<\/li>\n<\/ul>\n<h4> 2.0.2 <\/h4>\n<ul>\n<li>Tweak: added secure cookie settings<\/li>\n<li>Tweak: added notice if secure cookie settings couldn't be applied automatically<\/li>\n<\/ul>\n<h4> 2.0.1 <\/h4>\n<ul>\n<li>Fix: made the HSTS option available when using the pro plugin on a multisite installation<\/li>\n<li>Tweak: updated the Easy Digital Downloads plugin updater to version 1.6.14<\/li>\n<\/ul>\n<h4> 2.0.0 <\/h4>\n<ul>\n<li>Fix: moved scan data to transients, so large scan data arrays won't clutter the database<\/li>\n<li>Updated the 'Scan for issues tab'<\/li>\n<li>Fix: scan results are now shown in a responsive layout<\/li>\n<li>Fix: fixed a bug where protocol independent (\/\/) files and\/or stylesheet were not being scanned<\/li>\n<\/ul>\n<h4> 1.0.33 <\/h4>\n<ul>\n<li>Fix: adjusted the HSTS header so it will also work in three redirects<\/li>\n<li>Fix: not all hot linked images were matched correctly in the scan<\/li>\n<\/ul>\n<h4> 1.0.32 <\/h4>\n<ul>\n<li>Fix: When mixed content fixer is activated, urls are replaced to https, which prevented the scanner from finding these urls. A replace to http fixes this.<\/li>\n<li>Fix: Regex pattern updated to match the pattern in the free version, to prevent cross elemen matches.<\/li>\n<li>Fix: Changed priority of main class instantiation to make sure it instantiates after the core plugin<\/li>\n<\/ul>\n<h4> 1.0.31 <\/h4>\n<ul>\n<li>Removed direct redirect to primary URL, as preload list requires a two step redirect, first to https.<\/li>\n<\/ul>\n<h4> 1.0.30 <\/h4>\n<ul>\n<li>Fixed issue where preload HSTS setting wasn't saved when HSTS header was already in place.<\/li>\n<li>limited .htaccess edit to settings save action.<\/li>\n<\/ul>\n<h4> 1.0.28 <\/h4>\n<ul>\n<li>Added certificate expiration date admin notice<\/li>\n<li>Bypass redirect chain<\/li>\n<li>Fixed SSL per page compatibility issue<\/li>\n<\/ul>\n<h4> 1.0.27 <\/h4>\n<ul>\n<li>Added dutch translation<\/li>\n<li>Fixed typo in copyright warning box<\/li>\n<li>Fixed spacing between buttons in copyright warning box<\/li>\n<li>Tweak: added settings link to pro plugin in plugins overview page<\/li>\n<li>Fix: fixed a bug where curl function did not increment iteration, so redirect loops were not circumvented. Use wp_remote_get instead.<\/li>\n<\/ul>\n<h4> 1.0.26 <\/h4>\n<ul>\n<li>Added expiration warning functionality: enable it in the settings to get an email if your ssl certificate expires.<\/li>\n<li>Fixed a bug that detected if the HSTS should be added in the .htaccess or in the code<\/li>\n<li>HSTS now available for NGINX as well<\/li>\n<li>Fixed a bug where the last js and css files were not parsed for http urls.<\/li>\n<\/ul>\n<h4> 1.0.25 <\/h4>\n<ul>\n<li>css styling fixes\n= 1.0.24 =<\/li>\n<li>Bug fix in importer.php<\/li>\n<\/ul>\n<h4> 1.0.23 <\/h4>\n<ul>\n<li>Bug fixes\n= 1.0.22 =<\/li>\n<li>Added functionality to fix mixed content issues<\/li>\n<li>several bug fixes<\/li>\n<\/ul>\n<h4> 1.0.21 <\/h4>\n<ul>\n<li>improve license validation<\/li>\n<\/ul>\n<h4> 1.0.20 <\/h4>\n<ul>\n<li>Extended safe list of domains for scan<\/li>\n<li>fixed a bug in licensing for multisite.<\/li>\n<li>fixed a bug where the scan freezed because of not loading external url's<\/li>\n<\/ul>\n<p>= 1.0.19 =\nTweak: added better feedback on license not being activated\nTweak: added HSTS preload list option\nTweak: added mixed content fixer for the back-end<\/p>\n<p>= 1.0.18 =\nTweak: added possibility to deactivate license, for migration purposes\n= 1.0.17 =\nTweak: also checking for http links in form actions\nFix: bug caused empty scan results to show, even when no scan had been executed\nFix: last queue item was shown as nr 0, instead of the last nr<\/p>\n<p>= 1.0.16 =\nFix: bug where not all found blocked urls would show up\nFix: also searching for the escaped values of a url in the database.<\/p>\n<p>= 1.0.15 =\nTweak: added option to enable or disable the curl function for file requests<\/p>\n<p>= 1.0.14 =\nAdded option to disable brute force database scan<\/p>"},"banners":{"high":"https:\/\/really-simple-ssl.com\/readmes\/assets\/banner-1544x500.png","low":"https:\/\/really-simple-ssl.com\/readmes\/assets\/banner-772x250.png"},"icons":{"1x":"https:\/\/really-simple-ssl.com\/wp-content\/uploads\/edd\/2022\/11\/icon-256x256-1-128x128.png","2x":"https:\/\/really-simple-ssl.com\/wp-content\/uploads\/edd\/2022\/11\/icon-256x256-1-256x256.png"},"msg":"No license key has been provided.","stable_tag":"7.0.4","tested":"6.4","added":"2016-03-08","description":["<p>Really Simple SSL Pro offers premium support, HTTP Strict Transport Security, an extensive scan, and more detailed feedback on the configuration page.<\/p>\n<h4> Installation <\/h4>\n<ul>\n<li>Install the Really Simple SSL plugin, which is needed with this one.<\/li>\n<li>Go to \u201cplugins\u201d in your Wordpress Dashboard, and click \u201cadd new\u201d<\/li>\n<li>Click \u201cupload\u201d, and select the zip file you downloaded after the purchase.<\/li>\n<li>Activate<\/li>\n<li>Navigate to \u201csettings\u201d, \u201cSSL\u201d.<\/li>\n<li>Click \u201clicense\u201d<\/li>\n<li>Enter your license key, and activate.<\/li>\n<\/ul>\n<p>For more information: go to the <a href=\"https:\/\/www.really-simple-ssl.com\/\">website<\/a>, or\n<a href=\"https:\/\/www.really-simple-ssl.com\/contact\/\">contact<\/a> me if you have any questions or suggestions.<\/p>"],"changelog":["<h4> 7.0.4 <\/h4>\n<ul>\n<li>August 8th 2023<\/li>\n<li>New: Advanced hardening: block admin creation<\/li>\n<li>Improvement: WordPress tested up to 6.3<\/li>\n<\/ul>\n<h4> 7.0.3 <\/h4>\n<ul>\n<li>July 25th 2023<\/li>\n<li>Improvement: catch not existing 'SERVER_PROTOCOL'<\/li>\n<\/ul>\n<h4> 7.0.2 <\/h4>\n<ul>\n<li>July 6th 2023<\/li>\n<li>Improvement: prevent use of subdirectories in custom login url<\/li>\n<\/ul>\n<h4> 7.0.1 <\/h4>\n<ul>\n<li>Fix: change login url functionality not working in 7.0<\/li>\n<\/ul>\n<h4> 7.0.0 <\/h4>\n<ul>\n<li>New: Vulnerability Detection is in Beta - <a href=\"https:\/\/really-simple-ssl.com\/vulnerability-detection\/\">Read more<\/a><\/li>\n<\/ul>\n<h4> 6.2.5 <\/h4>\n<ul>\n<li>Improvement: stop trying the database rename if it fails on first attempt<\/li>\n<\/ul>\n<h4> 6.2.4 <\/h4>\n<ul>\n<li>New: change login url<\/li>\n<li>Fix: Exclude deprecated x-content-security-policy from header detection<\/li>\n<li>Improvement: Update to functional components Rest API for free core<\/li>\n<li>Improvement: Disable Content Security Policy if the maximum header size has been reached<\/li>\n<\/ul>\n<h4> 6.2.3 <\/h4>\n<ul>\n<li>Fix: rename db prefix using not available function<\/li>\n<li>Fix: Exclude deprecated x-content-security-policy from header detection<\/li>\n<\/ul>\n<h4> 6.2.2 <\/h4>\n<ul>\n<li>Fix: follow redirects in third party header detection.<\/li>\n<\/ul>\n<h4> 6.2.1 <\/h4>\n<ul>\n<li>Fix: prefix replacement in wp-config too broad, causing issues if wp_ is used other then in the prefix.<\/li>\n<li>Fix: Update prefix site_id in user roles when changing the database prefix, to preserve capabilities for users in subsites<\/li>\n<\/ul>\n<h4> 6.2.0 <\/h4>\n<ul>\n<li>Improvement: add support for BLOB and Filesystem<\/li>\n<li>Improvement: disable CSP reporting mode paused status when switching to disabled or enforced<\/li>\n<\/ul>\n<h4> 6.1.1 <\/h4>\n<ul>\n<li>Improvement: Use ABSPATH constant instead of path when writing path to debug.log<\/li>\n<li>Improvement: Pause CSP reporting after 20 requests, to lower server load<\/li>\n<li>Fix: script-src-elem in Content Security Policy not including source URL<\/li>\n<\/ul>\n<h4> 6.1.0 <\/h4>\n<ul>\n<li>Improvement: CSP policy for back and front-end separate<\/li>\n<li>Improvement: also allow non-recommended X-XSS options<\/li>\n<li>Improvement: frame ancestors allow other values than 'none'<\/li>\n<\/ul>\n<h4> 6.0.5 <\/h4>\n<ul>\n<li>Fix: Debug.log setting not saving on first save action<\/li>\n<\/ul>\n<h4> 6.0.4 <\/h4>\n<ul>\n<li>New: automatically detect wrong Security Header values from other sources, and duplicate headers<\/li>\n<li>Improvement: auto enable Insecure Requests header only when SSL enabled<\/li>\n<li>Improvement: remove unnecessary notices load in licenses block<\/li>\n<\/ul>\n<h4> 6.0.3 <\/h4>\n<ul>\n<li>Fix: isset check on $_SERVER['HTTPS'] to support environments where this key is missing<\/li>\n<li>Improvement: add headers_sent() check for situations where the headers already have been sent, possibly due to an error earlier in the system.<\/li>\n<li>Improvement: Update CSP reporting URI on permalink structure change<\/li>\n<\/ul>\n<h4> 6.0.2 <\/h4>\n<ul>\n<li>Fix: HSTS not running on hosting environments with load balanced configuration because SSL is not detected<\/li>\n<li>Fix: when wp-config.php is not writable, renaming database prefix could cause tables to get removed<\/li>\n<\/ul>\n<h4> 6.0.1 <\/h4>\n<ul>\n<li>Fix: upgrade to 6 logic running more than once<\/li>\n<\/ul>\n<h4> 6.0.0 <\/h4>\n<ul>\n<li>Tested up to WordPress 6.1.0<\/li>\n<li>Improvement: User Interface<\/li>\n<li>New: Server Health Check - powered by SSLLabs<\/li>\n<li>New: WordPress Hardening Features<\/li>\n<\/ul>\n<h4> 5.4.0 <\/h4>\n<ul>\n<li>Improvement: New default Referrer Policy =&gt; strict-origin-when-cross-origin<\/li>\n<li>Improvement: New default for X-XSS header<\/li>\n<li>Improvement: Dropped Expect-CT header as it's now deprecated, integrated by default in certificates<\/li>\n<li>Improvement: Updated Permissions Policy with improved defaults, updated to new values as currently supported in browsers<\/li>\n<li>Improvement: dropped access-control-allow-origin header, as it can only be used dynamically, which is not feasible in most WP environments<\/li>\n<\/ul>\n<h4> 5.3.6 <\/h4>\n<ul>\n<li>Improvement: new languages<\/li>\n<li>Improvement: several small bug fixes and typo's<\/li>\n<\/ul>\n<h4> 5.3.5.1 <\/h4>\n<ul>\n<li>Fix: new license check causing continuous license checking, resulting in slow response<\/li>\n<\/ul>\n<h4> 5.3.5 <\/h4>\n<ul>\n<li>Improvement: language files<\/li>\n<li>Improvement: some small bug fixes<\/li>\n<\/ul>\n<h4> 5.3.4 <\/h4>\n<ul>\n<li>Improvement: language files<\/li>\n<li>Changed: license check using own transient function<\/li>\n<\/ul>\n<h4> 5.3.3 <\/h4>\n<ul>\n<li>Removed credentialless from CORP setting as it caused some issues with embedded videos<\/li>\n<\/ul>\n<h4> 5.3.2 <\/h4>\n<ul>\n<li>Fix: PHP &lt;7 compatibility<\/li>\n<\/ul>\n<h4> 5.3.1 <\/h4>\n<ul>\n<li>Improvement: fix site health still showing header notice if activated in pro<\/li>\n<li>Improvement: set ssl verify to false on failed license check<\/li>\n<li>Improvement: improved CORS settings<\/li>\n<\/ul>\n<h4> 5.3.0 <\/h4>\n<ul>\n<li>Improvement: add support for report-to in CSP<\/li>\n<li>Improvement: increase CSP display limit<\/li>\n<li>Improvement: auto update option<\/li>\n<\/ul>\n<h4> 5.2.5 <\/h4>\n<ul>\n<li>Improvement: add direct link to permalinks when permalinks notice pops up<\/li>\n<li>Fix: navigation in scan overview<\/li>\n<\/ul>\n<h4> 5.2.4 <\/h4>\n<ul>\n<li>Improvement: feedback on not detected headers<\/li>\n<\/ul>\n<h4> 5.2.3.1 <\/h4>\n<ul>\n<li>Fix: Rest API and pretty permalinks check inverted, causing false positive notification in dashboard about the permalink structure<\/li>\n<\/ul>\n<h4> 5.2.3 <\/h4>\n<ul>\n<li>Improvement: various Content Security Improvements: added override to 20 reporting\/100 display limit. Fixed CSS when 100+ pages<\/li>\n<li>Improvement: added default required WordPress rules to Content Security Policy<\/li>\n<li>Improvement: fixed advanced header warning position<\/li>\n<li>Disable scan on invalid license<\/li>\n<li>Improvement: moved recommended security headers notice to free, added override in Pro<\/li>\n<li>Added Cross-Origin resource policy security headers<\/li>\n<\/ul>\n<h4> 5.2.2 <\/h4>\n<ul>\n<li>Fix: double quotes in php headers causing issues since recent browser updates<\/li>\n<\/ul>\n<h4> 5.2.1 <\/h4>\n<ul>\n<li>Improvement: replaced admin notice on inactivate license<\/li>\n<li>Improvement: move security headers above WP Rocket .htaccess rules to prevent compatibility issues<\/li>\n<li>Improvement: enable auto updates<\/li>\n<li>Improvement: Content Security Policy did not allow for wss:\/\/ and ws:\/\/ web socket protocol<\/li>\n<li>Improvement: removed trailing slash from rest api<\/li>\n<li>Improvement: added rsssl_pause_after_request_count filter to adjust request count on which CSP pauses<\/li>\n<li>Improvement: fixed some reporting variations<\/li>\n<\/ul>\n<h4> 5.2.0 <\/h4>\n<ul>\n<li>Improvement: changed PHP header option to dropdown<\/li>\n<li>Improvement: remove unnecessary parameter in file scan<\/li>\n<li>Improvement: request header origin sometimes returns null. Changing to 'host' resolves the Content Security Policy reporting API in those cases<\/li>\n<li>Improvement: styling issue on scan UX<\/li>\n<\/ul>\n<h4> 5.1.0 <\/h4>\n<ul>\n<li>Improvement: comment on multisite environments caused layout issue<\/li>\n<\/ul>\n<h4> 5.0 <\/h4>\n<ul>\n<li>Updated translations<\/li>\n<\/ul>\n<h4> 4.1.11 <\/h4>\n<ul>\n<li>Fix: for very long .htaccess files, support form in the plugin gave an invalid response. props Vincent<\/li>\n<\/ul>\n<h4> 4.1.10 <\/h4>\n<ul>\n<li>Fix: typo in reset license key obfuscation<\/li>\n<li>Translations update<\/li>\n<\/ul>\n<h4> 4.1.9 <\/h4>\n<ul>\n<li>Improvement: 'none' or '*' attribute deprecated for Permissions Policy<\/li>\n<li>Improvement: Content Security Policy for unsafe inline<\/li>\n<li>Improvement: Interest Cohort added to permissions policy<\/li>\n<\/ul>\n<h4> 4.1.8 <\/h4>\n<ul>\n<li>Fix: PHP headers were set with quotes, causing issues on some servers.<\/li>\n<li>Fix: When switching from &quot;enforce&quot; to &quot;paused&quot;, CSP headers were not removed<\/li>\n<li>Improvement: generalized wrap_header function for more robust header generation<\/li>\n<li>Improvement: disable remove .htaccess headers on activation of PHP headers.<\/li>\n<\/ul>\n<h4> 4.1.7 <\/h4>\n<ul>\n<li>Moved secure cookies to free<\/li>\n<\/ul>\n<h4> 4.1.6 <\/h4>\n<ul>\n<li>Improved WP Engine compatibility<\/li>\n<li>Improved Content Security Policy, added option to revoke result from overview<\/li>\n<li>Lowered Content Security Policy request limit<\/li>\n<\/ul>\n<h4> 4.1.5 <\/h4>\n<ul>\n<li>Fix: set defaults firing even when dependency check not validated<\/li>\n<li>Fix: Constant RSSSL_DOING_CSP not set when running the CSP API<\/li>\n<\/ul>\n<h4> 4.1.4 <\/h4>\n<ul>\n<li>Improvement: Added report-paused mode to Content Security Policy generator. Reporting will now automatically pause after 200 requests to prevent high server load<\/li>\n<li>Improvement: Further restricted access to Content Security Policy generator REST API calls<\/li>\n<li>Fix: Default options won't be reconfigured after plugin deactivation\/activation<\/li>\n<\/ul>\n<h4> 4.1.3 <\/h4>\n<ul>\n<li>Made PHP header option available on all configurations<\/li>\n<li>Improvement: wrap example code in comments<\/li>\n<\/ul>\n<h4> 4.1.2 <\/h4>\n<ul>\n<li>Fix: File name in upgrade function<\/li>\n<\/ul>\n<h4> 4.1.1 <\/h4>\n<ul>\n<li>Fix: condition for .htaccess writing in combination with do not edit .htaccess option<\/li>\n<\/ul>\n<h4> 4.1.0 <\/h4>\n<ul>\n<li>New: PHP headers support for all security headers, autodetecting necessity for NGINX.<\/li>\n<li>New: Changed feature policy into permissions policy.<\/li>\n<\/ul>\n<h4> 4.0.7 <\/h4>\n<ul>\n<li>Fix: always activate multisite license for main site url<\/li>\n<\/ul>\n<h4> 4.0.6 <\/h4>\n<ul>\n<li>Improvement: moved renamed free folder notice to free plugin<\/li>\n<li>Improvement: PHP 8 compatibility<\/li>\n<\/ul>\n<h4> 4.0.5 <\/h4>\n<ul>\n<li>Improvement: 404 redirect check expiration set to one year when test is successful<\/li>\n<\/ul>\n<h4> 4.0.4 <\/h4>\n<ul>\n<li>Fix: hsts header on multisite not saving<\/li>\n<\/ul>\n<h4> 4.0.3 <\/h4>\n<ul>\n<li>Fix: network settings link<\/li>\n<li>Fix: multisite hsts preload option not saving<\/li>\n<li>Improvement: License notifications. Differ between remaining activations when current site is activated, and when not.<\/li>\n<\/ul>\n<h4> 4.0.2 <\/h4>\n<ul>\n<li>Improvement: exclude .htaccess from edits outside settings page<\/li>\n<\/ul>\n<h4> 4.0.1 <\/h4>\n<ul>\n<li>Fix: decode license for support ticket<\/li>\n<li>Fix: made some untranslatable strings translatable<\/li>\n<\/ul>\n<h4> 4.0.0 <\/h4>\n<ul>\n<li>New user interface<\/li>\n<li>Fix: transient stored with 'WEEK_IN_SECONDS' as string instead of constant<\/li>\n<li>Improvement: notices dashboard, with dismissable notices<\/li>\n<li>Improvement: improved naming of settings, and instructions<\/li>\n<li>Improvement: new translations<\/li>\n<li>Improvement: new fix options in scan<\/li>\n<li>Fix: scan mixed content detection false positive<\/li>\n<li>Improvement: removal of .htaccess lines and wpconfig lines on deactivation<\/li>\n<li>Fix: CSP generation bug for some types<\/li>\n<li>Fix: is_writable check on secure cookies write<\/li>\n<li>Improvement: do not insert default security headers if SSL not enabled yet<\/li>\n<\/ul>\n<h4> 2.1.21 <\/h4>\n<ul>\n<li>Fix: return after htaccess is not writable<\/li>\n<\/ul>\n<h4> 2.1.20 <\/h4>\n<ul>\n<li>Improvement: add env=https based on apache version, if available.<\/li>\n<li>Improvement: fix both www and non www URL's in elementor<\/li>\n<\/ul>\n<h4> 2.1.19 <\/h4>\n<ul>\n<li>Added upgrade script to move HSTS header to security headers block<\/li>\n<li>Prefixed Elementor URL replace option<\/li>\n<li>Updated NGINX\/PHP security header notice<\/li>\n<li>Added function_exists() checks<\/li>\n<li>Add style-src-elem and script-src-elem to Content Security Policy<\/li>\n<li>Improved TLS version check to prevent cURL errors on some setups<\/li>\n<\/ul>\n<h4> 2.1.18 <\/h4>\n<ul>\n<li>Fix: check if uses_elementor function exists<\/li>\n<\/ul>\n<h4> 2.1.17 <\/h4>\n<ul>\n<li>Fix: check 404 homepage redirect issue only on settings page<\/li>\n<\/ul>\n<h4> 2.1.16.1 <\/h4>\n<ul>\n<li>Fixed a bug where having allow_url_fopen = 0 in the PHP configuration could cause a PHP warning on the Really Simple SSL dashboard<\/li>\n<\/ul>\n<h4> 2.1.16 <\/h4>\n<ul>\n<li>Added a TLS version check<\/li>\n<li>Added a check for a redirect to homepage which can cause mixed content errors on image<\/li>\n<\/ul>\n<h4> 2.1.15<\/h4>\n<ul>\n<li>Automatically fix mixed content in Elementor by calling the Elementor replace_urls() function<\/li>\n<\/ul>\n<h4> 2.1.14 <\/h4>\n<ul>\n<li>Added Permissions Policy security header<\/li>\n<\/ul>\n<h4> 2.1.13 <\/h4>\n<ul>\n<li>Removed env=HTTPS from HSTS preload header as it's not required anymore<\/li>\n<\/ul>\n<h4> 2.1.12 <\/h4>\n<ul>\n<li>Fixed a bug where the SSL page could not be opened on multisite installations<\/li>\n<\/ul>\n<h4> 2.1.11 <\/h4>\n<ul>\n<li>Fixed some untranslatable strings in security headers help tips<\/li>\n<li>Added German formal translations thanks to Thorsten Wollenh\u00f6fer<\/li>\n<\/ul>\n<h4> 2.1.10 <\/h4>\n<ul>\n<li>Removed error logging from CSP class<\/li>\n<\/ul>\n<h4> 2.1.9 <\/h4>\n<ul>\n<li>Fixed a bug where the rest route wouldn't initialize<\/li>\n<\/ul>\n<h4> 2.1.8 <\/h4>\n<ul>\n<li>Fixed a bug which could prevent the Content Security Policy generator endpoint from working on specific setups with a site in a subfolder<\/li>\n<\/ul>\n<h4> 2.1.7 <\/h4>\n<ul>\n<li>Tested with WordPress 5.3<\/li>\n<\/ul>\n<h4> 2.1.6 <\/h4>\n<ul>\n<li>Enabled some security headers by default.<\/li>\n<li>Show HSTS preload option after enabling HSTS option without reloading page<\/li>\n<li>Updated support tab to pre-fill fields on really-simple-ssl.com, directly sending from support tab resulted in some undelivered e-mails<\/li>\n<\/ul>\n<h4> 2.1.5 <\/h4>\n<ul>\n<li>Improved license request caching on settings page<\/li>\n<\/ul>\n<h4> 2.1.4 <\/h4>\n<ul>\n<li>Improved support tab request processing<\/li>\n<\/ul>\n<h4> 2.1.3 <\/h4>\n<ul>\n<li>Fix: fixed a bug where an empty regex matching group produced false positive http:\/\/ scan results<\/li>\n<\/ul>\n<h4> 2.1.2 <\/h4>\n<ul>\n<li>Added right-to-left text support<\/li>\n<li>Scan error is now dismissible<\/li>\n<li>Fix: certificate valid to date now only shows when the corresponding option has been enabled<\/li>\n<\/ul>\n<h4> 2.1.1 <\/h4>\n<ul>\n<li>Fix: no check for CSP violations when CSP not enabled.<\/li>\n<\/ul>\n<h4> 2.1 <\/h4>\n<ul>\n<li>Added Content Security Policy Generator<\/li>\n<li>Added security headers<\/li>\n<li>Fix: moved emptying of results in blocked url's outside of loop<\/li>\n<li>Added Danish, Hungarian and Polish languages<\/li>\n<\/ul>\n<h4> 2.0.24 <\/h4>\n<ul>\n<li>Tweak: added support for Bitnami\/AWS htaccess.conf<\/li>\n<li>Tweak: updated support notice to send an e-mail manually after no response for 24 hours<\/li>\n<\/ul>\n<h4> 2.0.23 <\/h4>\n<ul>\n<li>Tweak: added notices in license tab<\/li>\n<li>Tweak: admin notices will no longer show in Gutenberg edit screen<\/li>\n<li>Tweak: added visual feedback when fixing a scan results item<\/li>\n<li>Tweak: added notice when free plugin has been renamed<\/li>\n<li>Tweak: removed untraceable results from scan results<\/li>\n<li>Tweak: blog count fix for multi-networks<\/li>\n<\/ul>\n<h4> 2.0.22 <\/h4>\n<ul>\n<li>Tweak: added caching to redirect_to_http() function to prevent timeouts.<\/li>\n<li>Tweak: updated Portuguese translations.<\/li>\n<\/ul>\n<h4> 2.0.21 <\/h4>\n<ul>\n<li>Fix: fixed a bug in the redirect_to_http() function.<\/li>\n<\/ul>\n<h4> 2.0.20 <\/h4>\n<ul>\n<li>Added support tab<\/li>\n<li>Tweak: improved mixed content scan regexes<\/li>\n<li>Tweak: added a redirect to http:\/\/ check before activating SSL<\/li>\n<\/ul>\n<h4> 2.0.19 <\/h4>\n<ul>\n<li>Fix: fixed a bug where ignored url's were being added to the ignored url's array, even if they were already present.<\/li>\n<li>Tweak: the \/plugins\/, \/wp-admin\/ and \/wp-includes\/ directories have been excluded from the scan to increase performance.<\/li>\n<\/ul>\n<h4> 2.0.18 <\/h4>\n<ul>\n<li>Fix: html closure in activation message<\/li>\n<\/ul>\n<h4> 2.0.17 <\/h4>\n<ul>\n<li>Tweak: removed background running of scan<\/li>\n<li>Tweak: removed HTML from translatable strings<\/li>\n<\/ul>\n<h4> 2.0.16 <\/h4>\n<ul>\n<li>Tweak: updated notices to be in line with free notices<\/li>\n<\/ul>\n<h4> 2.0.15 <\/h4>\n<ul>\n<li>Tweak: when the scan is finished it shows the text Scan Finished and the progress bar turns green.<\/li>\n<li>Fix: improved external css and js detection regex<\/li>\n<\/ul>\n<h4> 2.0.14 <\/h4>\n<ul>\n<li>Fix: run javascript only on own settings page<\/li>\n<li>Fix: ajax url on some functions not correct<\/li>\n<li>Fix: scan results only outputting after a refresh<\/li>\n<\/ul>\n<h4> 2.0.13 <\/h4>\n<ul>\n<li>Tweak: updated the scan cron to prevent it from running without first starting the scan manually<\/li>\n<\/ul>\n<h4> 2.0.12 <\/h4>\n<ul>\n<li>Updated the scan functionality to use cron<\/li>\n<\/ul>\n<h4> 2.0.11 <\/h4>\n<ul>\n<li>Added scan support for the wp_postmeta table<\/li>\n<li>Fix: the show ignored URL's option now works correctly<\/li>\n<\/ul>\n<h4> 2.0.10 <\/h4>\n<ul>\n<li>Fix: certificate expiration warning showed even when cert is still a long period valid if no valid response is received.<\/li>\n<li>Fix: config screen still showing error while not blocked URL's were left, because a 0 == 'string' comparison return true.<\/li>\n<\/ul>\n<h4> 2.0.9 <\/h4>\n<ul>\n<li>Fix: the plugin will no longer scan its own folder for mixed content<\/li>\n<li>Fix: the scan now contains a number of common false positives in the $safe_domains array to prevent them showing up in the scan<\/li>\n<\/ul>\n<h4> 2.0.8 <\/h4>\n<ul>\n<li>Fix: added a notice when the HSTS header is set using PHP on NGINX servers<\/li>\n<\/ul>\n<h4> 2.0.7 <\/h4>\n<ul>\n<li>Fix: fixed a bug where the $has_result in the external CSS and JS scan was set to true when there were no results<\/li>\n<\/ul>\n<h4> 2.0.6 <\/h4>\n<ul>\n<li>Tweak: added a warning when inserting HSTS headers via PHP<\/li>\n<\/ul>\n<h4> 2.0.5 <\/h4>\n<ul>\n<li>Fix: deleted unnecessary transient delete<\/li>\n<\/ul>\n<h4> 2.0.4 <\/h4>\n<ul>\n<li>Added support for Widgets in the mixed content scan<\/li>\n<li>Tweak: changed icon classnames from icon to rsssl-icons<\/li>\n<\/ul>\n<h4> 2.0.3 <\/h4>\n<ul>\n<li>Tweak: option to disable flushing of rewrite rules on activation<\/li>\n<\/ul>\n<h4> 2.0.2 <\/h4>\n<ul>\n<li>Tweak: added secure cookie settings<\/li>\n<li>Tweak: added notice if secure cookie settings couldn't be applied automatically<\/li>\n<\/ul>\n<h4> 2.0.1 <\/h4>\n<ul>\n<li>Fix: made the HSTS option available when using the pro plugin on a multisite installation<\/li>\n<li>Tweak: updated the Easy Digital Downloads plugin updater to version 1.6.14<\/li>\n<\/ul>\n<h4> 2.0.0 <\/h4>\n<ul>\n<li>Fix: moved scan data to transients, so large scan data arrays won't clutter the database<\/li>\n<li>Updated the 'Scan for issues tab'<\/li>\n<li>Fix: scan results are now shown in a responsive layout<\/li>\n<li>Fix: fixed a bug where protocol independent (\/\/) files and\/or stylesheet were not being scanned<\/li>\n<\/ul>\n<h4> 1.0.33 <\/h4>\n<ul>\n<li>Fix: adjusted the HSTS header so it will also work in three redirects<\/li>\n<li>Fix: not all hot linked images were matched correctly in the scan<\/li>\n<\/ul>\n<h4> 1.0.32 <\/h4>\n<ul>\n<li>Fix: When mixed content fixer is activated, urls are replaced to https, which prevented the scanner from finding these urls. A replace to http fixes this.<\/li>\n<li>Fix: Regex pattern updated to match the pattern in the free version, to prevent cross elemen matches.<\/li>\n<li>Fix: Changed priority of main class instantiation to make sure it instantiates after the core plugin<\/li>\n<\/ul>\n<h4> 1.0.31 <\/h4>\n<ul>\n<li>Removed direct redirect to primary URL, as preload list requires a two step redirect, first to https.<\/li>\n<\/ul>\n<h4> 1.0.30 <\/h4>\n<ul>\n<li>Fixed issue where preload HSTS setting wasn't saved when HSTS header was already in place.<\/li>\n<li>limited .htaccess edit to settings save action.<\/li>\n<\/ul>\n<h4> 1.0.28 <\/h4>\n<ul>\n<li>Added certificate expiration date admin notice<\/li>\n<li>Bypass redirect chain<\/li>\n<li>Fixed SSL per page compatibility issue<\/li>\n<\/ul>\n<h4> 1.0.27 <\/h4>\n<ul>\n<li>Added dutch translation<\/li>\n<li>Fixed typo in copyright warning box<\/li>\n<li>Fixed spacing between buttons in copyright warning box<\/li>\n<li>Tweak: added settings link to pro plugin in plugins overview page<\/li>\n<li>Fix: fixed a bug where curl function did not increment iteration, so redirect loops were not circumvented. Use wp_remote_get instead.<\/li>\n<\/ul>\n<h4> 1.0.26 <\/h4>\n<ul>\n<li>Added expiration warning functionality: enable it in the settings to get an email if your ssl certificate expires.<\/li>\n<li>Fixed a bug that detected if the HSTS should be added in the .htaccess or in the code<\/li>\n<li>HSTS now available for NGINX as well<\/li>\n<li>Fixed a bug where the last js and css files were not parsed for http urls.<\/li>\n<\/ul>\n<h4> 1.0.25 <\/h4>\n<ul>\n<li>css styling fixes\n= 1.0.24 =<\/li>\n<li>Bug fix in importer.php<\/li>\n<\/ul>\n<h4> 1.0.23 <\/h4>\n<ul>\n<li>Bug fixes\n= 1.0.22 =<\/li>\n<li>Added functionality to fix mixed content issues<\/li>\n<li>several bug fixes<\/li>\n<\/ul>\n<h4> 1.0.21 <\/h4>\n<ul>\n<li>improve license validation<\/li>\n<\/ul>\n<h4> 1.0.20 <\/h4>\n<ul>\n<li>Extended safe list of domains for scan<\/li>\n<li>fixed a bug in licensing for multisite.<\/li>\n<li>fixed a bug where the scan freezed because of not loading external url's<\/li>\n<\/ul>\n<p>= 1.0.19 =\nTweak: added better feedback on license not being activated\nTweak: added HSTS preload list option\nTweak: added mixed content fixer for the back-end<\/p>\n<p>= 1.0.18 =\nTweak: added possibility to deactivate license, for migration purposes\n= 1.0.17 =\nTweak: also checking for http links in form actions\nFix: bug caused empty scan results to show, even when no scan had been executed\nFix: last queue item was shown as nr 0, instead of the last nr<\/p>\n<p>= 1.0.16 =\nFix: bug where not all found blocked urls would show up\nFix: also searching for the escaped values of a url in the database.<\/p>\n<p>= 1.0.15 =\nTweak: added option to enable or disable the curl function for file requests<\/p>\n<p>= 1.0.14 =\nAdded option to disable brute force database scan<\/p>"],"plugin":"really-simple-ssl-pro\/really-simple-ssl-pro.php","id":"really-simple-ssl-pro\/really-simple-ssl-pro.php"}";}