johnnyq 88648fb45c Security: send the JSON answers in agent/ajax.php as application/json so a browser never draws them as a page (the credential username and password answer and sixteen others), show the login key on the join page only while an invite is pending or accepted, and limit filter labels built from an id in the address to clients the agent can open with a new getFieldByIdInScope helper (tickets project filter, Trips and its export window, domains export window, Update Prices, AI refusals); adds the 26.11.9 changelog section

2026-11-13 17:04:57 -05:00

9.9 KiB

Raw Blame History

View Raw