7.5.0

Note: this release changes the default behavior for new installs in regards to IP detection. This shouldn't impact existing installs but there are two filters that can be used to change this behavior. See the readme for full details.

Fixed

• Update code snippet in the readme (props @dkotter, @jeffpaul via #291).

Security

• For new installs, ensure we only trust the REMOTE_ADDR HTTP header by default. Existing installs will still utilize the old list of approved headers but can modify this (and are recommended to) by using the rsa_trusted_headers filter (props @dkotter, @peterwilsoncc, @dustinrue, @mikhail-net, Darius Sveikauskas via #290).
• Bump axios from 0.25.0 to 1.6.2 and @wordpress/scripts from 23.7.2 to 26.19.0 (props @dependabot, @dkotter via #293).

New Contributors

• @dustinrue made their first contribution in #290
• @mikhail-net made their first contribution in #290
• Darius Sveikauskas made their first contribution in #290

---

Full Changelog: 7.4.1...7.5.0
View closed items in the milestone.