Comprehensive Security & Quality Audit
v2.4.0
Major release focused on security hardening, bug fixes from a comprehensive codebase audit, and SEO infrastructure.
- SecurityPatched SSRF vulnerability in Teams and Prometheus webhook notifications
- SecurityFixed cross-organization data access (IDOR) in notification channel linking
- SecurityAdded visual monitor count limit enforcement on monitor updates (billing bypass fix)
- NewMonitor status now shows specific error reasons — Connection Refused, DNS Failed, Timed Out, Blocked (403), Cloudflare Error (520-524)
- NewContextual "Unblock Guide" link appears when Cloudflare blocks monitoring
- NewCloudflare monitoring troubleshooting guide with IP whitelisting instructions
- NewServer offline detection — alerts when servers stop reporting for 5+ minutes
- NewAnomaly notifications now sent for medium+ severity AI-detected anomalies
- NewSEO content engine — topic clusters, internal link auto-injection, cluster-aware breadcrumbs
- NewChangelog page for tracking product updates
- FixFixed monitor refresh showing "Down (200)" for operational sites
- FixFixed MAJOR_OUTAGE and PARTIAL_OUTAGE displaying as "Operational" in UI
- FixFixed status mapping bugs across 7 files — missing states silently fell to wrong display
- FixFixed settings form fields (Method, Expected Status, Follow Redirects) not rendering on first open
- FixFixed 5-second middleware timeouts from session DB query on every request — added 5-minute cache
- FixFixed incident detail page unreadable in light mode (hardcoded dark-mode colors)
- FixAdded error boundary for dashboard — component crashes no longer remove navigation
- ImprovedReplaced all 20 native browser confirm() dialogs with styled React modals
- ImprovedReplaced all native alert() calls with auto-dismissing toast notifications
- ImprovedAdmin users table: dedicated Plan column + inline action buttons
- ImprovedPage timeouts and connection errors logged as warnings instead of errors (reduces Discord noise)
- ImprovedRemoved 11 dead code files (3,994 lines) — cleaner codebase
- ImprovedDNS and performance tables now scroll horizontally on mobile instead of crushing