STM Custom CSS & JS Manager Pro – The premium solution for WordPress

Version 2.3.0 — 2026-03-26

• **80+ Quick Snippets** — massively expanded snippet library (up from ~12 inline snippets)
• **Post-type-aware snippets** — dedicated snippets for WooCommerce products, posts, pages, with generic fallback for other post types
• **Categorized snippet grid** — snippets grouped by category (eg "Price & Shopping Cart", "Tabs & Info", "Reading Comfort") with labeled sections
• Product CSS: Hide price, Add to cart button, Sale badge, Quantity field, Sticky cart, Gallery grid, Disable zoom, Hide tabs, Hide reviews, Hide SKU/Categories/Tags, Accordion tabs, Related products, Upsells, Card style, Breadcrumbs, Full width, Highlight description
• Product JS: Variation event, variation reset, price update, shopping cart handler, quantity +/−, minimum quantity, gallery hook, override lightbox, preselect tab, stock level indicator
• Post CSS: Full-width featured image, initial letter, block quote, hide title, author box, hide meta, category badges, tag cloud, post navigation, hide/style comments, reading progress bar, social share bar, reading time badge
• Post JS: Calculate reading time, reading progress, table of contents, copy link, comment scroll, image lightbox, share buttons
• Page CSS: Full width, Hide title, Two columns, Narrow width, Hero section, Background image, Dividing lines, No header/footer, CTA button, Feature cards, Contact form
• Page JS: Scroll animation, counter animation, smooth anchor, tab content, accordion, back to top, form validation
• Generic CSS/JS fallback snippets for all other post types
• **Global Quick Snippets** on Settings page — collapsible snippet panel below each global CSS/JS editor with categorized snippets (typography, layout, buttons, animations, responsive, WooCommerce, navigation, UI effects, tracking)
• Compact
  UI with snippet count badge, auto-collapsed by default

• Snippets are now served from CCJM_Snippets class instead of being hardcoded in the metabox template
• Metabox uses CCJM_Snippets::get_for_post_type(), Settings page uses get_global_css() / get_global_js()
• Snippet click handler in admin.js now supports both metabox and global settings editors
• Snippet labels and code comments are in German
• metabox.php and settings-page.php significantly simplified — snippet rendering is data-driven

Version 2.2.1 — 2026-03-26

• CodeMirror line numbers now display correctly (instance was not captured from wp.codeEditor.initialize())
• Error line highlighting (red background) and gutter markers work reliably
• CodeMirror instance detection simplified — no longer destroys editors via toTextArea()

• **Auto-fix for validation errors:** "Fix All" button and per-error "Fix" buttons for missing semicolons, unclosed braces, and unexpected closing braces
• Validate / Format / Clear buttons duplicated below the editor for quick access without scrolling

Version 2.2.0 — 2026-03-26

• **Global CSS & JavaScript:** Add custom CSS and JS that loads on all pages site-wide
• **Enhanced code validation:** Line-level error detection with inline highlighting in the CodeMirror editor
• Validation errors and warnings are now displayed directly at the affected code lines (red/orange markers)
• Clickable error detail list below the editor — click to jump to the error line
• Brace mismatch detection now pinpoints the exact line of unclosed/unexpected braces
• Missing semicolon detection for CSS property declarations
• Global code editors on the Settings page with tabbed CSS/JS interface and CodeMirror syntax highlighting
• Post/page/product-specific code automatically takes priority over global code (CSS cascade + specificity prefixes)
• New hooks: ccjm_before_global_css_output, ccjm_after_global_css_output, ccjm_before_global_js_output, ccjm_after_global_js_output
• New filters: ccjm_global_css_output, ccjm_global_js_output, ccjm_get_global_css, ccjm_get_global_js
• New template tags: ccjm_get_global_css(), ccjm_get_global_js(), ccjm_has_global_css(), ccjm_has_global_js()

• Frontend output now uses two priority levels: 9998 (global) and 9999 (post-specific)
• Global code is included in settings export/import and reset-to-defaults
• Plugin description updated to reflect global code capability

Version 2.1.0 — 2026-03-09

• STM License Client SDK integration for license validation
• Auto-updater: checks Storetown Media update server for new versions
• License-gated automatic updates (requires active license key)

• License management now uses centralized STM License Client SDK
• One-time migration of legacy license data to STM format

Version 2.0.0 — 2026-03-08

• Full WPCS (WordPress Coding Standards) compliance across all PHP files
• Centralized CCJM_Sanitizer class for CSS/JS input sanitization
• wp_add_inline_style() / wp_add_inline_script() for all frontend output (replaces raw / tags)
• Post-specific capability checks (edit_post) for versioning and AJAX handlers
• Whitelist-based settings import with per-key sanitizer callbacks
• $wpdb->prepare() for all database queries including LIKE patterns
• Proper wp_unslash() + sanitize_text_field() on all $_POST/$_GET data
• Format arrays for all $wpdb->insert() / $wpdb->update() calls
• External assets/js/license.js (moved from inline script in license page)
• LICENSE.txt (GPLv2) in plugin root
• Comprehensive HTML documentation for CodeCanyon (documentation/index.html)
• German translation file (languages/ccjm-de_DE.po / .mo(325 entries)
• Translation template (languages/ccjm.pot)

• **Architecture:** Complete rewrite with shared core/ architecture (identical between Free and Pro)
• **Frontend output:** Hooks changed from wp_head/wp_footer to wp_enqueue_scripts (priority 9999)
• **Metabox:** Replaced anonymous closures with named class methods for WordPress compatibility
• **Import/Export:** Replaced deprecated get_page_by_title() with WP_Query
• **License page:** All inline JavaScript moved to enqueued license.js with wp_localize_script()
• **Settings page:** Uses disabled() helper function for Pro-only fields
• **Stats page:** Replaced deprecated current_time('timestamp') with time()
• **Capability:** Configurable via CCJM_Core::get_capability() instead of hardcoded edit_posts
• **Code validation AJAX:** Uses sanitize_textarea_field() for submitted code
• **Error display (JS):** XSS-safe via jQuery .text() instead of raw .html()
• Minimum PHP version requirement raised to 7.4

• Missing nonce verification on metabox save (sanitize_text_field( wp_unslash() ))
• Missing escaping on plugin action links (esc_url(), esc_html__())
• Unescaped HTML in translation strings (now uses wp_kses())
• Remote API error messages not sanitized in license handler
• Dynamic CSS class output missing esc_attr() on settings page
• Missing absint() on post IDs in frontend output

• All $_POST / $_GET / $_REQUEST access now uses wp_unslash() + sanitization
• All database queries use $wpdb->prepare() with proper format specifiers
• Import settings use whitelist with individual sanitizer callbacks per key
• Version restore re-sanitizes code through CCJM_Sanitizer before saving
• Direct file access protection (ABSPATH check) on all PHP files
• Nonce verification on all AJAX handlers and form submissions

Version 1.6.0 — 2026-02-12

• WooCommerce product page integration with dedicated CSS/JS metabox
• Quick access "Custom CSS/JS" column in post/page list tables
• Bulk actions to clear custom code from multiple posts at once
• Code size indicator in metabox footer (bytes / percentage of limit)

• Improved snippet insertion UX with preview on hover
• Analytics dashboard now shows top 10 pages by code size
• Better error messages for license activation failures

• Code editor not loading on WooCommerce product edit page
• Analytics CSV export missing UTF-8 BOM for Excel compatibility
• License status cache not clearing after manual deactivation

Version 1.5.0 — 2026-01-15

• **Multi-site support:** Network-wide settings, per-site overrides, network admin page
• **White label option:** Remove STM/ShopThemeManager branding for client projects
• Network-level maximum code size enforcement
• ccjm_network_settings filter for programmatic network configuration
• Admin bar indicator showing active custom code on current page

• Settings page reorganized with tabs (General, Editor, Limits, Advanced)
• Import/Export now supports cross-site transfers with URL mapping
• Improved code minification algorithm (20% smaller output on average)

• Code editor height not persisting after page reload
• Rare PHP notice when $post is null on certain admin screens
• Translation strings with placeholders not working correctly in some locales

Version 1.4.0 — 2025-12-10

• **50+ professional code snippets** organized by category (Layout, Typography, Effects, WooCommerce, JavaScript)
• **REST API endpoints** (/ccjm/v1/code/{id}) for reading/writing custom code programmatically
• User-defined custom snippet library (save your own reusable snippets)
• ccjm_before_output_css and ccjm_before_output_js filter hooks
• Keyboard shortcuts in code editor (Ctrl+S to save, Ctrl+/ to toggle comment)

• Snippet insertion now replaces selection instead of appending
• Code editor theme switched to "material" for better readability
• Settings export now includes snippet library

• JavaScript validation false positives on arrow functions
• Import failing silently when JSON file exceeds upload_max_filesize
• REST API returning 500 on posts without custom code metadata

Version 1.3.0 — 2025-11-05

• **Code versioning** with automatic version history (up to 10 versions per post)
• **Version restore** with one-click rollback to any previous version
• **Analytics dashboard** under Tools > CSS & JS Stats with usage charts
• CSV export for analytics data
• ccjm_max_versions filter to customize version history depth
• Database table {prefix}_ccjm_analytics for tracking code usage

• Metabox now shows "last modified" timestamp for CSS and JS
• Improved code validation with detailed error messages and line numbers
• Settings page now shows current license status and expiry date

• Code not saving when both CSS and JS fields are submitted simultaneously on slow servers
• PHP 8.1 deprecation notice for strftime() in analytics
• Missing text domain on 3 admin notice strings

Version 1.2.0 — 2025-10-02

• **Import/Export functionality** for transferring code and settings between sites
• **WooCommerce product support** (requires WooCommerce 5.0+)
• JSON-based import format with validation
• Settings import with selective key override
• ccjm_supported_post_types filter for developers

• Post type selection moved from hardcoded to dynamic settings UI
• Code editor now lazy loads for better page load performance
• Admin notices now dismissible with 30-day cooldown

• CodeMirror conflict with other plugins loading older versions
• Theme disable feature not working with child themes
• CSS validation rejecting valid @media queries with prefers-color-scheme

Version 1.1.0 — 2025-09-08

• **Code validation** with real-time CSS syntax checking
• **JavaScript validation** using basic syntax analysis
• Basic code snippet library (12 common patterns)
• Theme CSS/JS disable toggles by post
• ccjm_capability option for customizing required user role
• Configurable maximum code size (default: 50 KB)

• Metabox UI redesigned with tabbed interface (CSS, JS, Snippets, Settings, Help)
• CodeMirror updated to 5.65.x with better PHP 8 compatibility
• Admin menu moved from top-level to Settings submenu

• Custom CSS not outputting on password-protected posts
• JavaScript code stripped of single-line comments during save
• Editor not resizing correctly on narrow screens

Version 1.0.0 — 2025-08-01

• Initial Pro release
• Per-post and per-page custom CSS editor
• Per-post and per-page custom JavaScript editor
• CodeMirror-powered syntax highlighting
• License activation system via ShopThemeManager.com
• Support for posts, pages, and custom post types
• Admin settings page with basic configuration
• Automatic Free version deactivation on Pro activation
• Data preservation during Free-to-Pro upgrade
• Uninstall data cleanup option
• Gutenberg and Classic Editor support