M1
|
7b98ae78e5
|
fix: run_id = hash(monitor_id, interval_bucket) — unique per window, consistent across regions
|
2026-03-18 17:03:17 +04:00 |
|
M1
|
77534a037c
|
feat: show run_id (first 8 chars) in recent pings table
|
2026-03-18 16:42:50 +04:00 |
|
M1
|
e057a65535
|
fix: avgLatency NaN — extract .latency_ms from ping objects
|
2026-03-18 16:31:08 +04:00 |
|
M1
|
07648672ad
|
feat: per-region chart lines and lowest-avg sparkline
|
2026-03-18 16:25:47 +04:00 |
|
M1
|
8c39fb45c1
|
feat: add region selector to monitor edit form
|
2026-03-18 16:15:19 +04:00 |
|
M1
|
93db31db3b
|
feat: multi-region monitor support — region selector in UI, region flag on pings
|
2026-03-18 16:08:39 +04:00 |
|
M1
|
baea9f8e7e
|
fix: sub-key notice as separate card below account section
|
2026-03-18 12:05:24 +04:00 |
|
M1
|
6d057d5797
|
fix: move sub-key notice inside account section
|
2026-03-18 12:04:40 +04:00 |
|
M1
|
988c43090b
|
fix: make sub-key notice match page style
|
2026-03-18 12:03:02 +04:00 |
|
M1
|
a9a1e43146
|
feat: add sub-key notice banner on settings page
|
2026-03-18 12:01:35 +04:00 |
|
M1
|
f7d6eff972
|
fix: block sub-keys from accessing/modifying email, account key, and other sub-keys
|
2026-03-18 11:51:52 +04:00 |
|
M1
|
eeb0318c4d
|
fix: hide login key and sub-keys from sub-key sessions
|
2026-03-18 11:48:51 +04:00 |
|
M1
|
c56af82053
|
fix: increase key input maxlength to 64 for new key format
|
2026-03-18 11:45:31 +04:00 |
|
M1
|
641af86779
|
fix: separate jsHash for app.js cache busting
|
2026-03-18 09:43:11 +04:00 |
|
M1
|
3a9cd62cdd
|
fix: increase tos top padding to pt-28
|
2026-03-18 09:26:18 +04:00 |
|
M1
|
1325512c6d
|
fix: reduce tos page padding and section spacing
|
2026-03-18 04:04:47 +04:00 |
|
M1
|
143868eb21
|
fix: increase TOS top padding, add spacing above h2s
|
2026-03-18 03:59:52 +04:00 |
|
M1
|
7db2889960
|
feat: add Terms of Service page
|
2026-03-18 03:52:58 +04:00 |
|
M1
|
705073b508
|
fix: center hero section vertically on pageload
|
2026-03-18 03:45:14 +04:00 |
|
M1
|
ce4411b13b
|
feat: add 1-20s interval options, lower API minimum to 1s
|
2026-03-18 03:20:33 +04:00 |
|
M1
|
8221b3a33d
|
fix: remove redundant 'jitter' word from pings table
|
2026-03-18 03:05:39 +04:00 |
|
M1
|
a246b60cbe
|
fix: space between time and jitter label
|
2026-03-17 11:23:01 +04:00 |
|
M1
|
e7ec457d0e
|
feat: show jitter_ms in pings table time column
|
2026-03-17 10:48:24 +04:00 |
|
M1
|
5c91cbc522
|
refactor: convert all static HTML to EJS with cssHash cache-busting, remove stale html files
|
2026-03-17 09:54:44 +04:00 |
|
M1
|
41bfe52f10
|
feat: cache-bust static assets with CSS content hash on startup
|
2026-03-17 09:44:18 +04:00 |
|
M1
|
a995fe3c94
|
feat: replace Tailwind CDN with self-hosted pre-built CSS
|
2026-03-17 09:32:34 +04:00 |
|
M1
|
cf8903f95d
|
fix: fixed width on text column prevents layout shift when timestamp changes
|
2026-03-17 07:48:00 +04:00 |
|
M1
|
017d489e2e
|
fix: mutate polyline points in place on SSE ping, no fetch, no flicker
|
2026-03-17 07:44:09 +04:00 |
|
M1
|
2c32bc1115
|
Revert "fix: client-side sparkline with local buffer, no server fetch on update"
This reverts commit 72bc11813d.
|
2026-03-17 07:42:36 +04:00 |
|
M1
|
72bc11813d
|
fix: client-side sparkline with local buffer, no server fetch on update
|
2026-03-17 07:38:26 +04:00 |
|
M1
|
6929d8f51f
|
fix: atomic SVG replaceWith() on sparkline update, no empty-frame bounce
|
2026-03-17 07:35:54 +04:00 |
|
M1
|
0874583a4f
|
Revert "fix: static HTML label spans outside swap zone, chart only returns SVG + label update script"
This reverts commit e8bfaa42d7.
|
2026-03-17 07:34:02 +04:00 |
|
M1
|
e8bfaa42d7
|
fix: static HTML label spans outside swap zone, chart only returns SVG + label update script
|
2026-03-17 07:32:39 +04:00 |
|
M1
|
5eb463a03a
|
fix: SVG h-full so it fills container exactly, no overflow or clipping
|
2026-03-17 07:28:57 +04:00 |
|
M1
|
51baf7c495
|
fix: chart container w-full overflow-hidden prevents graph escaping bounds
|
2026-03-17 07:27:05 +04:00 |
|
M1
|
f00c78116b
|
fix: detail page updates all stats, status bar, pings table in realtime via SSE
|
2026-03-17 07:23:54 +04:00 |
|
M1
|
93c3a1e84a
|
fix: pin sparkline container to 120x32 to prevent layout shift on update
|
2026-03-17 07:20:56 +04:00 |
|
M1
|
1794c05b4f
|
fix: restore status dot, latency, last-ping time updates on SSE
|
2026-03-17 07:15:31 +04:00 |
|
M1
|
94d24bac35
|
fix: fetch sparkline/chart immediately on SSE ping, no debounce delay
|
2026-03-17 07:12:48 +04:00 |
|
M1
|
b802c7c68b
|
fix: bust Cloudflare cache on app.js with version query string
|
2026-03-17 07:10:27 +04:00 |
|
M1
|
66b368453d
|
refactor: single account-level SSE stream instead of per-monitor connections
|
2026-03-17 07:06:09 +04:00 |
|
M1
|
55f9f6d8ed
|
refactor: SSE just refreshes sparkline/chart from server, no DOM stat patching
|
2026-03-17 07:03:10 +04:00 |
|
M1
|
e461d73ce3
|
refactor: drop all hashing, store keys plaintext
|
2026-03-17 06:47:22 +04:00 |
|
M1
|
54c89a5a11
|
fix: store key_plain on sub-keys, display always in settings with copy button
|
2026-03-17 06:40:33 +04:00 |
|
M1
|
c684d96d90
|
fix: rename API Keys -> Sub-Keys, show key inline on creation, no reload
|
2026-03-17 06:37:29 +04:00 |
|
M1
|
ab4f60e159
|
fix: rotate button inline with key field, updates in place
|
2026-03-17 06:34:57 +04:00 |
|
M1
|
0c65b5e3fa
|
fix: just show the login key on settings page
|
2026-03-17 06:33:13 +04:00 |
|
M1
|
2ec1915ef5
|
fix: remove pointless internal UUID from settings, show login key label instead
|
2026-03-17 06:31:41 +04:00 |
|
M1
|
9d8982ae50
|
fix: key rotation shows new key in dedicated reveal, not sub-key div; clarify account ID label
|
2026-03-17 06:29:58 +04:00 |
|
M1
|
6bdd76b4f0
|
security: auth redesign, SSRF protection, CORS lockdown, and 13 other fixes
- Auth (#2/#3): UUID PK, 256-bit keys, SHA-256 lookup + bcrypt hash
- SSRF (#1): validate URLs, block private IPs, cloud metadata endpoints
- CORS (#4): lock to pingql.com origins, not wildcard
- SSE limit (#6): 10 connections per monitor max
- ReDoS (#7): cap $regex patterns at 200 chars
- Monitor limit (#8): 100 per account default
- Cookie env config (#9): secure/domain from env vars
- Bearer parsing (#10): case-insensitive RFC 6750
- Pings retention (#11): 90-day pruner, hourly interval
- monitors.enabled index (#12): partial index for /internal/due
- Runner locking (#14): locked_until for horizontal scale safety
- COALESCE nullable bug (#17): dynamic PATCH with explicit undefined checks
- MONITOR_TOKEN null guard (#18): startup validation + middleware hardening
- reset-key cookie fix (#16): sets new cookie in response
|
2026-03-17 06:10:10 +04:00 |
|