Highlights
- Fairer upstream power rating. Low upstream transmit power on its own no longer turns a line Critical: it is rated at most Marginal, with its own explanation and recommended action. Low OFDMA upstream power is no longer rated against a range the operator specification does not define, tolerated upstream modulation now counts in the overall health, and PDF reports name the active threshold profile and quote low downstream power. (#1109, #1110, #1111, #1112, #1114)
- Stricter browser security. The Content Security Policy now allows only DOCSight's own scripts, blocks plugins and foreign base URLs, and drops unused CDNs. Trusted Types run in report-only mode. If an enabled community module still uses inline JavaScript, DOCSight keeps it working, names the module in the log and flags it in Doctor. (#1131, #1136)
- Faster dashboard. Scripts load deferred, icons and images reserve their space so the page no longer jumps, fallback fonts match the theme font, and text responses are gzip-compressed. Dashboard refreshes load only the changed part of the page, the event log rebuilds only changed days, and hidden tabs stop polling. (#1132, #1133)
- Better keyboard, touch and screen reader access. Glossary explanations and the correlation event filter work with keyboard and touch. Dialogs use native modal behaviour with scroll lock, the journal asks before discarding a description, and settings and setup forms move focus to the first invalid field with a readable error. (#1134, #1135)
- Modem and integration fixes. Hitron CODA-4582/4680 modems are detected and wrong passwords are reported as login failures. The Vodafone Station TG variant logs in again instead of failing with "TG: Not authenticated". MQTT keeps retrying when the broker is down at startup, so Home Assistant sensors come back without a restart. (#1105, #1124, #1120)
Community modules
Scripts in community modules must now come from static files. Modules with inline <script> blocks or on* attributes keep working for now, but they relax the policy for the whole app until they are updated. The UniFi WAN Monitor module 3.3.4 already follows the new rules. Module authors find the details on the Modules wiki page.
Special thanks
- @bobdole4prez for reporting the Hitron CODA-4680/4582 detection and login problems and testing the fix on a CODA-4582 (#1103, #1104).
- @HaxTheCook for the discussion on rating low upstream power (#1108) and for reporting wrong target names in Connection Monitor events (#1106).
- @Benle90 for reporting that MQTT stayed off when the broker was down at startup (#1113).
- @icerno78 for reporting the Vodafone Station TG login error (#1123).
Fixes
- Connection Monitor events name the target by label and host instead of an internal ID that could point to a deleted target. (#1107)
- The refresh button stays next to the countdown in the dashboard meta row. (#1122)
- Native controls and scrollbars follow the light or dark mode, and outage durations show whole, localized seconds. (#1128)
- Quotes are escaped in HTML attribute values, and malformed BNetzA CSV dates are ignored instead of stored verbatim. (#1129)
- The speedtest table no longer gains a sort listener on every refresh, the Connection Monitor TCP mode hint is reachable by keyboard, and modals stay open when a text selection ends outside them. (#1130)
Maintenance
- The container image is based on Python 3.15. (#1115)
- Updated pypdf to 7.0.0 (PDF parsing hardening), soupsieve to 4.0.1, fpdf2, click and paho-mqtt, plus GitHub Actions updates. Unused warning descriptions were removed from the translations. (#1118, #1119, #1102, #1117, #1101, #1116, #1121)
Container images
ghcr.io/itsdnns/docsight:v2026-11-15.1ghcr.io/itsdnns/docsight:stableghcr.io/itsdnns/docsight:latest
Use stable to follow releases only; latest also follows changes on main.
Support the project
If DOCSight helps you understand and document your connection, you can support its continued development through Ko-fi, GitHub Sponsors or PayPal.
Full diff: v2026-11-02.1...v2026-11-15.1