v0.2.6 — Security fixes

v0.2.6 — Security fixes

Security

• DOM XSS fix: icon preview in host editor now uses createElement/textContent instead of innerHTML — prevents script injection via crafted icon URL
• Input validation: port validated as u16 (1–65535), invalid values fall back to 8849
• Input validation: host rejects dangerous characters, falls back to 0.0.0.0
• Input validation: web_refresh clamped to [5–3600] seconds
• Input validation: tab refresh normalized to positive integer or empty string

Code quality

• Fixed formatting in uptime monitor loop

v0.2.5 — UI polish

v0.2.5

Fixes

• Panel heading color restored after Bootswatch CSS override
• Added SVG favicon in browser tab (green dashboard icon)

0.2.4 release

Full Changelog: v0.2.3...v0.2.4

Fix user UID:GID

Full Changelog: v0.2.2...v0.2.3

Few fixes

• addPanel(): replace innerHTML with DOM API to prevent XSS via panel key
• removePanel(): fix use-after-free (element removed before key read)
• tabs_handler: reorder by sorted key position, not id-1 (broken for gaps)
• panel_edit_handler/panels_handler: fix rename collision — preserve source hosts
• status dot: move to bottom-right, increase size 9px→12px"
• CICD flow fixes