This pull request introduces a new global "Redirect Page" setting for authenticated user redirection, improves Content Security Policy (CSP) compatibility, and simplifies the shortcode logic by removing the redirect attribute. The admin interface now uses Select2 for easier page/post selection, and the redirect mechanism uses a meta refresh instead of JavaScript. Several tests have been updated to reflect these changes.

Admin Settings and UI Improvements:

• Added a new "Redirect Page" setting in the admin, allowing configuration of the destination page for authenticated users; the field uses Select2 for easier searching and selection. The field's visibility toggles based on the "Auto-redirect" checkbox. [1] [2] [3] [4]
• Default settings and sanitization updated to support the new redirect_page option. [1] [2] [3]

Shortcode and Redirect Logic Changes:

• Removed the redirect attribute from the [passwp_login] shortcode; redirection now uses the global setting. The redirect logic is centralized and uses a meta refresh tag for CSP compatibility instead of JavaScript. [1] [2] [3] [4]
• Updated the redirect URL resolution to use the selected page/post from settings, with fallback to the homepage if not set or invalid.

Testing Updates:

• Unit tests updated and expanded to verify the new redirect behavior, including tests for meta refresh output, correct redirect URLs, and handling of the new global setting. [1] [2] [3] [4] [5]

Changelog and Versioning:

• Bumped plugin version to 1.4.0 and updated changelog and readme to reflect new features and changes. [1] [2] [3] [4]

Bug Fixes:

• Fixed CSP violation by replacing inline JavaScript redirects with a meta refresh tag. [1] [2]

These changes collectively improve the plugin's flexibility, security, and user experience.