#admin

The RSS 2.0 feed at /feed.php: what it contains, auto-discovery via render_header_scripts(), feed URL, and notes on pagination and caching.

Layered security out of the box: protected paths, HTTP security headers, CSP configuration, contact form protection layers, theme preview token, browser caching strategy, and a production deployment checklist.

Two-track i18n system: front-end and admin locale files, the caching mechanism, URL slugs, output helpers, and how to add a new language.

How to use the visual menu builder: drag-and-drop item ordering, sub-menus, data format, and reading the menu in a theme.

How the live theme preview works: signed HMAC token, session check, JS link rewriting, and the files involved.