Rabbit SEO

1.4.1

• Fixes WordPress Admin auto-login after Connect: keep install HMAC as SSO fallback so existing accounts never hit the password claim screen when connection signature fails.
• Uses alphanumeric connection secrets only and never sanitize_text_field on them (sanitize could desync the shared secret and break HMAC).

1.4.0

• Admin Rendered Sync: capture JavaScript-rendered / SPA pages in the administrator’s browser (iframe, tab fallback).
• Capture script activates only during a short-lived admin session; connection secrets never go to JavaScript.
• Sanitized DOM snapshots POST to same-origin REST, then HMAC-push to Rabbit SEO as wordpress_browser_rendered.
• Standard PHP Sync now remains the fast default; Rabbit SEO prefers newer browser-rendered snapshots.

1.3.0

• Server-initiated page snapshots: Rabbit SEO asks for specific URLs via REST; connect/cron send a URL index only (no full-site HTML dump).
• Builds a synthetic HTML document (title/meta/canonical + body) so empty block homepages still audit.

1.2.9

• Rebinds website GUID / onPageOpt.js when reconnecting after a Rabbit SEO site was deleted and re-added.
• Purges page caches on connect and disconnect so script changes apply immediately.

1.2.8

• Fixes duplicate “Rabbit SEO” rows on Plugins screen (only rabbitseo.php is a plugin entry now).

1.2.7

• Loads onPageOpt.js from the Rabbit SEO CDN so connected sites actually apply optimizations (fixes www.rabbitseo.com 404 for rabbitseo-wp.js).
• Rewrites legacy www script URLs to CloudFront automatically.

1.2.6

• Hardens WordPress Admin auto login/signup: registers the install with Rabbit SEO before opening the workspace (with retries).
• Refreshes install registration on admin load so known Rabbit SEO emails open inside WP Admin without a password prompt.
• Warns in WP Admin when Rabbit SEO cannot be reached for install registration.

1.2.5

• On activate/deactivate, purge LiteSpeed and other common page caches so Rabbit SEO detects the plugin immediately.
• Adds a public /wp-json/rabbitseo/v1/ping discovery route and no-cache headers on plugin REST responses.

1.2.4

• Existing Rabbit SEO accounts open from WordPress Admin without a password (install-signed SSO).
• Adds this WordPress site as another website under that account when the plan allows.
• New emails still auto-signup; claim page offers sign-in or create a new account as a fallback.

1.2.3

• Auto-connect: a valid Rabbit SEO connect token links the site immediately (no second Approve click).
• Workspace auto-starts connect when the plugin is installed but not yet linked.

1.2.2

• Connect is required (not optional) for Auto Fix, publish, and Cloudflare-safe snapshot audits.
• Clearer WordPress Admin messaging and install steps for Connect → Approve → Sync.
• Direct plugin-information install deep link from Rabbit SEO (exact slug, one Install Now).

1.2.1

• Signed iframe login when already connected (HMAC with per-site shared secret).
• Safer soft-create path for first install.

1.2.0

• Plugin-first workspace: embed Rabbit SEO in WordPress Admin (no new window).
• Auto-register / login from the current WordPress admin email and site URL.
• Compact WordPress connection strip for App Password sync controls.

1.1.0

• Outbound site snapshot sync to Rabbit SEO (HMAC signed) for Cloudflare-safe audits.
• Sync now control, daily safety sync, and publish/update/delete incremental updates.
• Snapshot shared secret established during Approve and Connect.

1.0.0

• Initial production release.
• Secure Application Password connection flow.
• Frontend script embed with approved CDN allowlist.
• REST read endpoints for status, pages, and SEO metadata.