0.4.0

• Fix Symfony 7 conflicts
• fix: code quality cleanup — DI, dedup, CSP, reflection, dead code
• security+perf: gate SQL profiler on access check, fix object creation
• perf: scope observers to frontend/adminhtml areas only
• security: systematic XSS remediation across all templates
• security: mask sensitive data in toolbar output
• security: CSRF protection, POST enforcement, cookie allowlist
• fix: add plugin guards, production mode check, default-off

Many thanks to @rhoerr for all of his contributions.

0.3.4

• Add, identification for unauthorized CSP js inline
• Compatibility 2.4.8 and php 8.4

0.3.3

• Cannot instantiate abstract class, fix #89

0.3.2

• Fix adminhtml renderer
• Add doc screenshots

0.3.1

Fix the typo in the XML closing tag within the comment, thanks to @hgati

0.3.0

• Compatibility Magento 2.4.7 with strict CSP policy
• Hyva and Breeze compatibility (vanilla JS)
• Dynamic SQL profiling with backtrace
• Code refactoring

0.2.4.1

• Add support for Magento 2.4.5-p9 and all of the versions which doesn't supports mixed types (thanks to @djalex-ua )

0.2.4

• Backward compatibility with Magento without VarDumper

0.2.3

• Catch VarDumper in ajax calls
• Code refactoring
• Do not catch dd()

0.2.2

Use config for handle_vardumper, move handler, bypass dd()