This pull request releases version 1.2.2 with a focus on security improvements, bug fixes, and backward compatibility. The major updates include hardened redirect handling to prevent unsafe URL redirection, a fix for session cookie behavior, and improvements to the customization settings for the footer link. Automated tests and test infrastructure have also been enhanced to ensure these changes are robust.

Security & Redirect Handling Improvements:

• All posted redirect URLs are now validated using wp_validate_redirect, ensuring that external or hostile URLs are rejected and users are always redirected to the site home if an unsafe URL is detected. This prevents open redirect vulnerabilities. [1] [2]
• Added a PHPUnit test to verify that external redirect URLs are always rejected, increasing test coverage for the new redirect logic.

Session Cookie Fixes:

• Session cookies now omit the expires option for correct browser session behavior, ensuring that session cookies are handled as expected by browsers.

Customization & Backward Compatibility:

• The footer link customize key in settings has been updated from footer_link_url to footer_link, with backward compatibility logic to support older configurations seamlessly. [1] [2] [3]

Release & Documentation:

• Updated version numbers in composer.json, package.json, and readme.txt to 1.2.2, and added a changelog entry summarizing these changes. [1] [2] [3] [4]