Skip to content

20260619 (testing/beta)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@db-EV db-EV released this 19 Jun 08:54
20260619-testing
9624036
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security & performance hardening

This release tightens error handling and output security, speeds up data refresh, and makes file writes report failures correctly. Backward-compatible: no configuration or session-format changes.

Security

  • API errors no longer expose the account ID or VIN — failed requests report only the host, and user-facing/cron messages are now generic.
  • Consistent output escaping (htmlspecialchars with ENT_QUOTES/UTF-8), rel="noopener noreferrer" on external map links, and Cache-Control: no-store on all pages.

Performance

  • Cockpit, charge-mode and (Ph2) location are now fetched concurrently via curl_multi, noticeably reducing dashboard load time; weather still follows afterwards as it depends on the GPS data.
  • cURL timeouts are centralized and lowered (8s connect / 15s total) so an unresponsive API can no longer stack up across the calls in a single page load.

Reliability

  • Session and CSV writes now return false on a lock or write failure instead of always reporting success.

After updating you may delete the session file as usual; no settings need to change.

Full Changelog: 2024080...20260619-testing

Assets 2
Loading