Skip to content
Security SecurityTrackingDashboard

Security hardening across the platform

Fixed an XSS in the Cookie Keeper JS, an SSRF guard over the sGTM /healthy probe, an owner-only gate on the billing, plan, and power-up POST handlers, host↔tenant binding in the tracking proxy.

MORE CHANGES

Recent releases

  1. New feature

    Migrating from Addingwell — dedicated landing + importer

    The third migration landing (after Stape and Google Cloud) — an EU vs EU feature comparison where Addingwell covers gen…
  2. Improvement

    Lead-capture closure — auto-confirmation emails

    The migration wizard, /care/ and /contact/ now send an immediate pre-flight email with a checklist instead of "we'll ge…
  3. Improvement

    Unified branding — italic [DataNostro] across zones

    Marketing, dashboard, and auth zones share the same italic Noto Serif wordmark with orange [square brackets]. The end o…
  4. New feature

    Migrating from Google Cloud Run — landing + cost calculator

    A new /migrace-z-google-cloud/ landing with a real-pricing GCP model (vCPU + RAM + egress + Cloud Logging) and a slider…
  5. Fix

    Honest stats panel — no placeholder numbers

    The recovery panel now shows the real state instead of simulated percentages. The bot counter reads from the correct Re…
All changes