- Improved Spellbook Bootstrap integration for better cross-plugin compatibility and reduced duplicate loading.
- Fixed an issue where an incomplete phone input mask source data could still copy Live Merge Tag value.
- Fixed an issue where Name fields with custom prefix choices could not be filtered or matched in queries.
- Fixed an issue where raw live merge tag data may show for a conditionally hidden email field.
Fixed an issue with Live Merge Tags on conditionally hidden phone fields.
Fixed an issue where Live Merge Tags could potentially cause a fatal error when checking address fields on GravityView.
Improved security of how HTML is handled in Live Merge Tags. Instead of running through wp_kses_post, wp_kses is used with a default of no allowed tags. The old behavior will remain in place for existing Populate Anything installations for backwards compatibility. We recommend adding gppa_use_permissive_lmt_sanitization via add_filter( 'gppa_use_permissive_lmt_sanitization', '__return_false' ); to switch to the stricter HTML stripping. You may configure allowed tags and attributes with gppa_lmt_kses_allowed_html.