Skip to content
TapNTable
Devlog
v0.10.14

TapNTable 0.10.14: updates with a safety net

Update and restore without surprises

  • The built-in updater now asks for an explicit confirmation when the installation is not running in production mode - no more applying a real update to a test environment by mistake.
  • When an update finishes, the queue workers (emails, SMS, background jobs) are restarted automatically so they pick up the new code right away.
  • Scheduled backups can no longer fire in the middle of an update or a restore - they wait for the next window.
  • Restoring from a manually uploaded file now shows the same destructive warning and mandatory confirmation the regular restore already had: a restore replaces your current data, and that should be said before, not after.
  • The installed app’s “offline” page was rebuilt: it speaks your language, follows the light or dark theme and reloads on its own when the connection returns.

Security on every page

  • Every response from the application now carries modern security headers - protection against file-type sniffing, a strict referrer policy, camera and microphone blocked, and HTTPS enforced when the site already runs on HTTPS. The content policy starts in report-only mode, breaking nothing.
  • It is no longer possible to remove the administrator role from the last administrator of the house - or to remove it from yourself by accident. The installation is never left without someone at the helm.
  • The activity log no longer writes every sign-in twice - one entry per event, as it should be.
  • Dashboard widget data now requires the proper permission on the network call as well, not just on the screen.

Google Analytics on the storefront and the app only loads after the visitor accepts cookies - and if they refuse, or change their mind, the denial signal is sent immediately. The storefront footer gained a “Change consent” button to revisit the choice at any time. The widget embedded on other sites never loads analytics: there, the host site is in charge.

Small things that matter

  • Staff tablets keep their session alive even when parked on a settings page, and no longer silently jump to another branch after a long pause - the chosen branch is remembered on the device.
  • When filling in company details with Portugal as the country, a mistyped VAT number shows an immediate amber warning - without blocking the save.
  • The public language switcher now rejects languages the house has not enabled, even in forged requests.
  • The app became more robust against stale caches after an update - one of those caches could take down the home page on manually updated installations.

Version 0.10.14 is available now and reaches installations through the built-in updater, as usual.