Sanitized and validated webhook request method and signature header values before use.
Stopped storing raw signed webhook request bodies; order metadata now stores a sanitized normalized JSON snapshot.
0.1.1
Added trusted returnUrl handoff support for Woo checkout-created payments so payers can return to the merchant order-received page after hosted checkout.
Improved underpaid result messaging on hosted checkout status pages by showing actual received amount instead of requested amount.
Removed non-functional underpaid action buttons to keep the underpaid flow clear and deterministic.
Added merchant integration docs coverage for return URL behavior across API, iframe, and Woo flows.
0.1.0
Initial production candidate release.
Hosted checkout redirect + credential validation.
Signed webhook handling and duplicate-event protection.