Changed
- Action values can now be omitted or set to
nullwhen creating actions, matching the existing support for resetting values on update - HTTP responses now include security headers (
X-Content-Type-Options,X-Frame-Options,Referrer-Policy, etc.) viahelmet - The
Time-Zonerequest header is now validated before use; invalid values fall back to the server timezone silently - Free-text fields in the database (
source,deviceName,deviceManufacturer,osName,osVersion,browserName,browserVersion,title,key,details) now enforce maximum length limits to prevent storage abuse