Complete a security and performance hardening pass #70

New issue

Open

opened 2026-07-01 01:06:51 +00:00 by manlycucumber · 0 comments

manlycucumber commented

2026-07-01 01:06:51 +00:00

(Migrated from github.com)

Problem

Before launch, the plugin needs a focused pass on nonces/capabilities, output escaping, query/asset efficiency, and cache behaviour under load.

Acceptance criteria

All admin actions and REST writes verify nonces and capabilities.
No surface issues uncached engine/Api calls on hot paths under a load test.
Assets are minified/conditionally loaded and pass a Lighthouse performance threshold on a reader page.
A documented security checklist is completed and recorded.

Notes

Lean on the cache-first discipline so shared hosting is never overloaded.

## Problem Before launch, the plugin needs a focused pass on nonces/capabilities, output escaping, query/asset efficiency, and cache behaviour under load. ## Acceptance criteria - [ ] All admin actions and REST writes verify nonces and capabilities. - [ ] No surface issues uncached engine/Api calls on hot paths under a load test. - [ ] Assets are minified/conditionally loaded and pass a Lighthouse performance threshold on a reader page. - [ ] A documented security checklist is completed and recorded. ## Notes Lean on the cache-first discipline so shared hosting is never overloaded.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Directorium/Ordo#70

No description provided.

Rows
Columns