• Server Notifications: Improve notification text for server add/remove activity.
• Docs: Add ToS and Privacy Policy.
• Security Hardening: Redact secrets from web hook detail output log (best effort).
• Bug Fix: UI crash in getWFParamPreviewHTML for omitted optional number param values. Ref #175.
• Add THREAT_MODEL.md file for security audits.
• Typo fix in docs and sample config: outbound_blacklist and outbound_whitelist should be blacklist and whitelist, in the airgap config.
• Security Hardening: Secrets API: Ensure secret key names don't match any bad strings (i.e. proto and the like).
• Security Hardening: API handler: Disallow any params matching bad key names (i.e. proto and the like).
• Security Hardening: Remove macro substitution support from system hook shell exec command (was undocumented anyway).
• Security Hardening: Lock down more built-in plugin fields to administrator-only (HTTP URL, Docker Run Command, etc.).
• Security Hardening: Check secret variable key names for illegal strings (i.e. proto and the like).
• Security Hardening: Increase default secret key length to 32 chars in container-start.sh
• api_get_latest_monitor_data: Allow both GET and POST parameters. Fixes #214.