Announcing:
LiteSpeed Extension for Plesk v2.6.0
In this release: administrator access control, bug fixes, and more!
RELEASE LOG:
* [New Feature] Add an "Access Control" toggle on the main screen, letting the built-in Plesk administrator grant Additional Administrator Accounts access to the plugin.
* [Improvement] Remove the limit for the Redis cache size.
* [Improvement] Require CSRF tokens on all remaining state-changing actions.
* [Improvement] Harden root-side file operations against local privilege escalation.
* [Improvement] Harden scripts and escalated commands against potential command injection, and make input validation consistent across system locales.
* [Improvement] Harden plugin pages against potential XSS by escaping displayed messages, titles, and form errors by default.
* [Improvement] Harden the parsing of escalated command output.
* [Improvement] Correct which administrator accounts the v2.5.0 access restriction applies to.
* [Improvement] Show a friendly message page instead of an "Exception Caught" error when an account that may not use the plugin opens it.
* [Improvement] Make the panel and the Redis scripts read the `redis_svc.sh` server line consistently.
* [Improvement] Sanitize values written to the plugin log file.
* [Improvement] Improve handling of the WebAdmin password during installation. Installation now also stops with a clear message rather than leaving the WebAdmin console with no usable login.
* [Improvement] Improve compatibility with Shared Code Library updates during a WordPress cache scan.
* [Improvement] Reduce page load size across the plugin UI.
* [Bug Fix] Prevent Redis validation slowdowns when Redis is unused.
* [Bug Fix] Fix LiteSpeed Containers stats showing blank cells when a Prometheus time range is selected.
* [Bug Fix] Fix setting, changing, and clearing the Redis config file failing or silently doing nothing in a number of cases, and give a clear reason when a path is rejected.
* [Bug Fix] Fix the Redis service file sometimes being upgraded incorrectly.
* [Bug Fix] Fix the Redis size list sometimes displaying empty after enabling Redis for a user.
* [Bug Fix] Fix the plugin version shown on the main screen reporting 2.4.4 on a v2.5.0 install.
* [Bug Fix] Fix browsers continuing to use cached plugin JavaScript and CSS after an upgrade.
* [Bug Fix] Fix search box and table styling not being applied on plugin data tables.
* [Bug Fix] Fix the LiteSpeed Web Server installer's PHP setup step never running, and looking for a Plesk PHP version that Plesk no longer offers.
https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log
Cheers!
LiteSpeed Extension for Plesk v2.6.0
In this release: administrator access control, bug fixes, and more!
RELEASE LOG:
* [New Feature] Add an "Access Control" toggle on the main screen, letting the built-in Plesk administrator grant Additional Administrator Accounts access to the plugin.
* [Improvement] Remove the limit for the Redis cache size.
* [Improvement] Require CSRF tokens on all remaining state-changing actions.
* [Improvement] Harden root-side file operations against local privilege escalation.
* [Improvement] Harden scripts and escalated commands against potential command injection, and make input validation consistent across system locales.
* [Improvement] Harden plugin pages against potential XSS by escaping displayed messages, titles, and form errors by default.
* [Improvement] Harden the parsing of escalated command output.
* [Improvement] Correct which administrator accounts the v2.5.0 access restriction applies to.
* [Improvement] Show a friendly message page instead of an "Exception Caught" error when an account that may not use the plugin opens it.
* [Improvement] Make the panel and the Redis scripts read the `redis_svc.sh` server line consistently.
* [Improvement] Sanitize values written to the plugin log file.
* [Improvement] Improve handling of the WebAdmin password during installation. Installation now also stops with a clear message rather than leaving the WebAdmin console with no usable login.
* [Improvement] Improve compatibility with Shared Code Library updates during a WordPress cache scan.
* [Improvement] Reduce page load size across the plugin UI.
* [Bug Fix] Prevent Redis validation slowdowns when Redis is unused.
* [Bug Fix] Fix LiteSpeed Containers stats showing blank cells when a Prometheus time range is selected.
* [Bug Fix] Fix setting, changing, and clearing the Redis config file failing or silently doing nothing in a number of cases, and give a clear reason when a path is rejected.
* [Bug Fix] Fix the Redis service file sometimes being upgraded incorrectly.
* [Bug Fix] Fix the Redis size list sometimes displaying empty after enabling Redis for a user.
* [Bug Fix] Fix the plugin version shown on the main screen reporting 2.4.4 on a v2.5.0 install.
* [Bug Fix] Fix browsers continuing to use cached plugin JavaScript and CSS after an upgrade.
* [Bug Fix] Fix search box and table styling not being applied on plugin data tables.
* [Bug Fix] Fix the LiteSpeed Web Server installer's PHP setup step never running, and looking for a Plesk PHP version that Plesk no longer offers.
https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log
Cheers!