Changelog

What changed, and why. Written honestly, including bug fixes.

July 9, 2026 latest

Security hardening + multi-page landing

  • - Strict Content Security Policy + security headers (HSTS, frame, nosniff) on app and landing.
  • - SSRF guard on reference URLs so they cannot reach internal networks.
  • - Landing became a multi-page site: blog, pricing, about, privacy, terms.
  • - Editor migrated to Lexical; DOCX export now reads documents correctly.
  • - Theme and language preferences synced across publikasi.cloud and app.publikasi.cloud.
July 8, 2026

Single document model + auth hardening

  • - Content structure unified into one document per project (not separate chapters).
  • - Email verification on signup, login attempt limits, password reset.
  • - Sessions auto-revoked when password changes.
  • - Per-user AI generation limits for fair usage.
July 7, 2026

Initial foundation

  • - RAG engine (Cloudflare AI Search) to write from references.
  • - CrossRef and OpenAlex citation verification.
  • - DOCX export, project workflow, and Pro subscriptions via Xendit.