New: getting-started guidance — a one-time welcome notice after activation, a “How to embed a story” guide on the settings page, and Settings / How-to-embed links on the Plugins screen.
Inline embed height from the shortcode/block is now capped at 4000px, matching the settings limit.
The settings height field now allows the full 200–4000px range.
Uninstall also removes cached URL-verification transients.
1.0.1
Settings page now loads its JavaScript with wp_enqueue_script() + wp_localize_script() instead of an inline script tag (WordPress.org review compliance).
Inline iframes now render only for verified story URLs: *.scrollytelling.ai stories are allowed directly, custom-domain stories are confirmed against the Scrollytelling API (with caching); unverified URLs fall back to the link card.
Hardened the card poster style against CSS injection via the thumbnail attribute.
The account-status endpoint now requires administrator capability.
Requires WordPress 6.6+ (the block uses the JSX runtime introduced in 6.6).