July 2026
Platform Security & Trust Update
- Security Moved all API keys, SMTP credentials, and database credentials to environment variables.
- Security Fixed XSS vectors in dashboard, admin panel, leaderboard, and blog rendering.
- Security Standardized admin authentication across blog and upload endpoints.
- Security Hardened file uploads with image re-encoding and execution blocking.
- Security Improved client IP detection to prevent spoofing.
- Security Added HTTPS enforcement, HSTS, and Content Security Policy headers.
- Feature Launched real About Us, Cookie Policy, Refund Policy, and Changelog pages.
- Fix Updated Privacy Policy and Terms of Service to match current protocols and pricing.