Changed
- Only strip the
tokenParm
URL parameter from the canonical URL, leaving others intact if explicitly set by the developer (generally query strings should not be in canonical URLs, but there are exceptions) - Don't provide link to Plugin Settings or allow them to be accessed without permission, or without
allowAdminChanges
being enabled (#1150)