v1.7.44 — Fix JS crash in renderAssets: WP script src can be false not string

WordPress registers scripts/styles with src=false (inline-only assets).
PHP ?? operator doesn't catch false, so false was JSON-encoded as boolean
and passed to JS where .replace() and .toLowerCase() don't exist on it.

- PHP: use is_string() guard, cast to '' when not a string
- JS: String() coerce in truncate(), truncateUrl(), assets filter loop

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Andrew Baker

assets/cs-perf-monitor.js

@@ -266,9 +266,9 @@
 
         rows = rows.filter(function (r) {
             if (pluginFilter && r.plugin !== pluginFilter) return false;
-            if (search && r.handle.toLowerCase().indexOf(search) === -1
-                       && r.src.toLowerCase().indexOf(search) === -1
-                       && r.plugin.toLowerCase().indexOf(search) === -1) return false;
+            if (search && String(r.handle).toLowerCase().indexOf(search) === -1
+                       && String(r.src).toLowerCase().indexOf(search) === -1
+                       && String(r.plugin).toLowerCase().indexOf(search) === -1) return false;
             return true;
         });
 
@@ -1157,12 +1157,12 @@
     }
     function truncate(str, max) {
         if (!str) return '';
-        var s = str.replace(/\s+/g, ' ').trim();
+        var s = String(str).replace(/\s+/g, ' ').trim();
         return s.length > max ? s.slice(0, max - 1) + '\u2026' : s;
     }
     function truncateUrl(url, max) {
         try {
-            var u = new URL(url), out = u.hostname + u.pathname;
+            var u = new URL(String(url)), out = u.hostname + u.pathname;
             if (u.search) out += u.search.slice(0, 20) + (u.search.length > 20 ? '\u2026' : '');
             return out.length > max ? out.slice(0, max - 1) + '\u2026' : out;
         } catch(e) { return truncate(url, max); }

cs-code-block.php

@@ -3,7 +3,7 @@
  * Plugin Name: CloudScale Code Block
  * Plugin URI: https://andrewbaker.ninja
  * Description: Syntax highlighted code block with auto language detection, clipboard copy, dark/light mode toggle, code block migrator, and read only SQL query tool. Works as a Gutenberg block and as a [cs_code] shortcode.
- * Version: 1.7.43
+ * Version: 1.7.44
  * Author: Andrew Baker
  * Author URI: https://andrewbaker.ninja
  * License: GPL-2.0-or-later
@@ -38,7 +38,7 @@
  */
 class CloudScale_Code_Block {
 
-    const VERSION      = '1.7.43';
+    const VERSION      = '1.7.44';
     const HLJS_VERSION = '11.11.1';
     const HLJS_CDN     = 'https://cdnjs.cloudflare.com/ajax/libs/highlight.js/';
     const TOOLS_SLUG   = 'cloudscale-code-sql';
@@ -1712,19 +1712,20 @@ private static function perf_build_assets_data(): array {
         $scripts_obj = wp_scripts();
         $styles_obj  = wp_styles();
 
+        // WP registers scripts/styles with src=false (inline-only); cast to string
+        // so the JS side always receives a string, never a boolean false.
         $scripts = [];
         foreach ( $scripts_obj->done as $handle ) {
             if ( ! isset( $scripts_obj->registered[ $handle ] ) ) {
                 continue;
             }
             $dep = $scripts_obj->registered[ $handle ];
-            $src = $dep->src ?? '';
+            $src = is_string( $dep->src ) ? $dep->src : '';
             $scripts[] = [
-                'handle' => $handle,
+                'handle' => (string) $handle,
                 'src'    => $src,
                 'plugin' => self::perf_attr_asset( $src ),
-                'ver'    => $dep->ver ?? '',
-                'deps'   => $dep->deps ?? [],
+                'ver'    => is_string( $dep->ver ) ? $dep->ver : ( $dep->ver ? (string) $dep->ver : '' ),
             ];
         }
 
@@ -1734,12 +1735,12 @@ private static function perf_build_assets_data(): array {
                 continue;
             }
             $dep = $styles_obj->registered[ $handle ];
-            $src = $dep->src ?? '';
+            $src = is_string( $dep->src ) ? $dep->src : '';
             $styles[] = [
-                'handle' => $handle,
+                'handle' => (string) $handle,
                 'src'    => $src,
                 'plugin' => self::perf_attr_asset( $src ),
-                'ver'    => $dep->ver ?? '',
+                'ver'    => is_string( $dep->ver ) ? $dep->ver : ( $dep->ver ? (string) $dep->ver : '' ),
             ];
         }
 

readme.txt

@@ -4,7 +4,7 @@ Tags: code block, syntax highlighting, gutenberg block, dark mode, highlight.js
 Requires at least: 6.0
 Tested up to: 6.7
 Requires PHP: 7.4
-Stable tag: 1.7.43
+Stable tag: 1.7.44
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -79,7 +79,7 @@ Yes. Press Enter to run the query. Use Shift+Enter to insert a newline. Ctrl+Ent
 
 == Changelog ==
 
-= 1.7.43 =
+= 1.7.44 =
 * Added: CS Monitor — Assets tab showing all enqueued JS and CSS files with plugin attribution, type filter, and search
 * Added: CS Monitor — Hooks tab showing top 50 hooks by cumulative time, with sortable columns and search
 * Added: CS Monitor — Object cache stats card in Summary (hit rate, hits/misses, persistent cache detection)