commit ba23484417c0fd48483150e6effefdc17bc7fb3e
parent ebadce7ef7165b6438433798168dccde1e12bbe5
Author: Amit Dutta <mail@amit.is-a.dev>
Date: Sat, 29 Aug 2026 07:51:54 +0530
Update security information and upgrade notes
Removed outdated security warning and updated upgrade notes for version 4.2.1 to clarify security fixes.
Diffstat:
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/src/whatsapp-logger/index.md b/src/whatsapp-logger/index.md
@@ -8,15 +8,11 @@ order: 900
A privacy-focused, self-hosted WhatsApp archiving tool. It captures messages — including deleted ones — via a linked device connection and stores them in your own Firebase Firestore database.
-!!!warning Security update in v4.2.1
-Versions before v4.2.1 shipped a public Firebase Web SDK config in the frontend, which let anyone who viewed the page source read your chat database directly, bypassing login. As of v4.2.1, the frontend talks only to your Render backend over an authenticated connection — Firestore is never reachable from the browser. If you're on an older version, update and follow the revised [Firebase Setup](firebase-setup.md) and [Frontend Setup](setup-frontend.md) steps.
-!!!
-
## Upgrade notes (v4.2.x)
If you're updating from an older version, here's everything that changed across the v4.2.x line in one place:
-- **v4.2.1 — Security fix.** Removed the public Firebase Web SDK config from the frontend (see the warning above). The frontend now only talks to your Render backend, never Firestore directly. Update your Firestore rules to deny all direct client access, as shown in [Firebase Setup](firebase-setup.md).
+- **v4.2.1 — Security fix.** Removed the public Firebase Web SDK config from the frontend. The frontend now only talks to your Render backend, never Firestore directly. Update your Firestore rules to deny all direct client access, as shown in [Firebase Setup](firebase-setup.md).
- **v4.2.2 — Real-time sync now covers every chat, not just the one you have open.** Previously, new messages only arrived for a chat you already had open — anything happening in other chats sat on the server until you clicked into them. Now a single sync connection streams updates for *all* chats at once, so incoming messages show up across every contact the moment they arrive, the way WhatsApp itself behaves when your phone comes back online.
- **v4.2.2 — Full resync with real progress.** `Settings` → refresh icon → `Hard Reset` now pulls your entire message history chat-by-chat instead of one giant download, so the progress bar reflects actual messages fetched instead of a rough guess. Use this if you ever open a chat that shows nothing locally even though the server has history for it — for example after clearing site data, or on a new device or browser.
- **UI refresh.** Reworked to three selectable themes — Catppuccin Latte (light), Catppuccin Mocha (dark), and a true-black AMOLED theme — replacing the old dark-mode toggle and the multiple chat-background picker. Find it under `Settings` → `Appearance` → `Theme`.
