Tootfinder

#Webmention for Craft v1.3.0 is out 🎉 – first in a short series of #security releases. 🔒
Fixes a stored XSS vulnerability in author/entry URLs, adds per-IP rate limits, and failure-backoff to harden the public endpoint against abuse.
Upgrade recommended!

Release v1.3.0 — Security & abuse hardening release · matthiasott/webmention
🔒 Security Fixed a stored XSS vulnerability in author and entry URLs displayed in the control panel and front-end Webmention templates. The plugin now validates URL schemes (only http(s): allowed)...

Just published a small enhancement and bugfix release for the #Webmention for #Craft CMS plugin.
It adds two important details though: lazy loading and alt text support for avatar images. 😎

✍️ New post: Buckle Up
I recently added a “Failed Webmentions” view to my Craft CMS #Webmention plugin. Opened it before #IndieWebCamp Düsseldorf and found line after line of automated probing. Just shipped v1.3.0 to deal with it and wrote a bit about it:

Buckle Up · Matthias Ott
Web design engineer, UX designer, teacher, and speaker – helping teams build websites and digital products with a focus on CSS, accessibility, and performance.

Hi :) If you see this, on #bluesky or #mastodon, please react, its a #webmention test from my blog !