Skip to content

v1.1.0 - Security Hardening & Performance

Choose a tag to compare

View all tags
@CameronKish CameronKish released this 19 Dec 21:59
· 65 commits to main since this release
v1.1.0
dcb0902

🔒 Security Enhancements

  • Prevented CORS Token Theft: Implemented secure Token Injection. The authentication token is now embedded directly into the application HTML at runtime, preventing potential theft by unauthorized scripts.
  • Restricted API Access: The /api/auth/token endpoint is now strictly blocked in production environments (403 Forbidden) to prevent local token discovery.
  • Updated Policies: Added comprehensive SECURITY.md and DATA_PRIVACY.md documentation outlining our local-first data guarantees.

🚀 Performance & UX

  • Instant macOS Startup: Optimized the macOS build process (switched to --onedir), eliminating the ~15s unpacking delay. The app now launches instantly.
  • Windows Splash Screen: Added a branded splash screen on Windows to provide immediate visual feedback while the AI engine initializes.

🛠 Internal Improvements

  • Project Organization: Moved build scripts and documentation to dedicated folders (/scripts, /docs) for a cleaner repository.
  • Logging: Standardized backend logging to use the Python logging module instead of print statements.

Full Changelog: v1.0.0...v1.1.0

Assets 3
Loading