diff --git a/CHANGELOG.md b/CHANGELOG.md index 527b27b..cc50359 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1053,8 +1053,7 @@ and closed the one remaining documented security gap. - First phase of the "full admin takeover" initiative: Posts, Pages, Media Library, Users, and Comments no longer redirect to a separate `admin.php?page=...` URL — they now hijack their native screens in place - (`ScreenHijack.php`, registered via `HijackedNativePages.php`), the same - approach the original uixpress reference plugin used. WordPress's + (`ScreenHijack.php`, registered via `HijackedNativePages.php`). WordPress's `load-{page}.php` hook fires before the native screen prints anything, so Aurora buffers and discards the native output and mounts its own Vue page in its place — the URL never changes, so there's no separate slug that can diff --git a/PROJECT_STATUS.md b/PROJECT_STATUS.md index 1780ad8..85c00da 100644 --- a/PROJECT_STATUS.md +++ b/PROJECT_STATUS.md @@ -287,8 +287,8 @@ URL with no rewrite needed. **Plugins is the one exception, deliberately left on the old redirect mechanism** — `plugins.php` prints output in a way that can't be cleanly -buffered (confirmed by the old uixpress reference plugin's own abandoned -attempt at hijacking it the same way). It still has a real +buffered (confirmed via a prior abandoned attempt at hijacking it the same +way). It still has a real `aurora-admin-plugins` submenu under `plugins.php` and its own `redirect_native_pages()` branch in `SubApps.php`.