SafeLine-CE 9.4.4

Improved

• Added a Beta upgrade channel: you can opt in from the console to try new features early, and upgrade smoothly to the stable release once it’s published
• [Lite/Pro] Custom rules now support “Belongs to ASN / Does Not Belong to ASN” match operators. You can block attack sources by the ASN of the source IP without manually maintaining large IP ranges, and hit rules show ASN info in the logs.
• [Pro] Domain-based upstreams now support dynamic resolution: when the DNS records of an upstream domain change, the resolved IP is updated automatically, so failover no longer requires a manual reload.
• A new announcement banner at the top of the console shows release updates and important notices. Announcements can be viewed in detail, temporarily dismissed, or permanently hidden.
• Upstream health checks support a custom check path, so you can accurately tell whether the upstream is actually available even when your app is not served from the root path
• Improved the panel for adding an attack IP to IP Group blocklists on the LOGSpage: the IP group list now appears directly in the dialog, the confirm button is no longer covered by the dropdown overlay, and you can still add the IP to multiple groups at once
• Updated the IP geolocation database
• Enhanced overall security: Strengthened security boundaries between the management panel and detection engine, removed unnecessary container privileges, and reinforced license validation to improve the security of default deployments.

Fixed

• Fixed an issue where deleting a syslog alert config failed backend validation
• Fixed malformed redirect URLs after SSO authentication (OIDC) that prevented jumping to the protected application
• Fixed pages showing “Untitled” instead of the auto-fetched application title when no custom app name was set
• Fixed manually uploaded application favicons not syncing from the master node to slave nodes
• Fixed leftover HTTP FloodC rate limiting configs (including custom rules) after deleting a protected application
• Fixed Anti-Bot Challenge events stuck in “ongoing” state, which also stopped further challenge logs
• Fixed third-party script errors (e.g. browser extensions) being misreported as “Unknown Error” on the anti-bot challenge page
• Fixed unexpected line wrapping of the “Edit” button in attack detection & blocklist tooltips
• Fixed the upgrade icon not showing when a new version was available
• Fixed a crash in the semantic analysis engine when processing malformed detection logs
• Fixed semantic analysis modules becoming greyed out and impossible to re-enable after being disabled
• Fixed sync details after master-slave sync failures (retry cursor, site creation time) and inaccurate license status display in master-slave mode
• Fixed the 5xx error rate metric on the dashboard and non-positive Top values on the security posture page