= 5.3.0 =
* Added: compatibility with Thrive Leads (and other Thrive products loading forms through Thrive Dashboard): Google Fonts @imported by forms which are loaded asynchronously are now replaced with locally hosted copies.
* Added: Smart Optimize results reported by visitors can only preload font files hosted on this site, OMGF’s upload URL, a host the site already loads stylesheets, scripts or fonts from, or a whitelisted host: hosts of preloads reported during an administrator’s visit are whitelisted automatically, other hosts are listed on the Dashboard for approval (the stoplight in the admin bar turns blue), and the whitelisted and ignored hosts can be managed below the Smart Optimize option.
* Improved: preloads’ and unloads’ paths are validated and the number of stored preloads and unused fonts is now limited.
* Improved: font files OMGF couldn’t download correctly are reported as an alert (red) in the admin bar, instead of a warning, because OMGF Pro can’t fix those. Requires OMGF v6.3.12.
* Security: external stylesheets are fetched over a safe request that rejects internal/private hosts.
* Security: asynchronously loaded Google Fonts stylesheets are only processed during an authorized Auto-Config run.
* Security: only the query string of a Google Fonts stylesheet URL is decoded before it’s requested.
* Tested with WP 7.1.