Ask @lvkaszus! - v3.0
- Completely re-written and re-designed Backend
config.yml
file instead of.env
file for application configuration- Using JSON Body to send and receive data (instead of HTTP Headers) to fix other problems with encoding/decoding when sending messages/displaying current messages
- Sender Blocking based on sender's IP address blacklisting in one of the database tables (IP Addresses of Users around the internet are public after all, so sender's anonymity/privacy has not been lost!)
- Authorization System that consists of Register + Login + Change Password + Logout features working with JSON Web Tokens (JWT) that are stored in cookies with
HttpOnly=True
,Secure=True
orSecure=False
(depending on your configuration) andSameSite=Strict
parameters for enhanced protection against XSS and other attacks - Cross-Site Request Forgery (CSRF) Protection by Flask-WTF
- Separate Rate-limiting for Authorization System, User Frontend Endpoints, Admin Frontend Enpoints, User RESTful API Endpoints and Admin RESTful API Endpoints to enhance rate-limiting options customization
- SQLAlchemy instead of pure SQL Queries
- User/Admin Frontend API
- RESTful User/Admin API with option to restrict CORS Access-Control-Allow-Origin header in
config.yml
file - Feature to completely disable/enable turning on application RESTful User/Admin API by changing Global API setting in application global settings
- User Frontend and Admin Frontend are in one package now (because of CSRF Protection issues when User Frontend was on second domain and when Admin Frontend was on some other domain)
- Update Checker
- 'Approve Questions First' Mode
- Added feature to hide/show all questions or hide/show single question
- Telegram Notifications
- Integrated Backend Tools for recovering/changing administrator password, deleting administrator account or restoring factory default settings
- Re-designed User Interface with Material UI library
and many more...