Changelog
What we
shipped.
Every feature, fix, and improvement to FerrGrowth. Cross-product view at ferrlabs.com/changelog.
RSSFerrGrowth: older visitor identifiers are re-keyed too
Visitor hashes stored before the daily salt shipped are replaced once with a one-way value whose key is then thrown away.
FerrGrowth: heatmap clicks are only recorded for pages that exist
The heatmap endpoint now drops clicks for a page that is not a published page of the site, and caps the page path at 200 characters.
FerrGrowth: visitor identifiers can no longer be reversed to an IP address
Analytics and form submissions now hash visitors with a random salt that changes every day and is destroyed after two days, instead of a fixed one.
FerrGrowth: choose which organisation an API call acts in
If you belong to several organisations, the API now takes an x-ferrgrowth-org header to pick one per request, after checking that you are a member.
FerrGrowth: rate limits on forms, analytics and member login
Your site's public endpoints now refuse floods from a single source, and member login no longer reveals which emails have an account.
FerrGrowth: real bold and italic for the fonts you upload
A heading or body font can now hold one file per weight and style, so bold and italic text use the real cut instead of a smeared imitation.
FerrGrowth: see your fonts before you apply them
The font picker now draws each uploaded font in its own face, and site settings show each font family set in itself.
FerrGrowth: alt text on hero, card, testimonial and logo images
Hero side images, card images, testimonial photos and the navbar logo now take alt text in the editor, so screen readers and image search can describe them.
FerrGrowth: hosted sites now ship with security headers
Every page FerrGrowth serves for your site now carries anti-clickjacking, nosniff and referrer headers, plus HSTS on verified custom domains. Nothing to configure, and your embedded scripts keep working.
FerrGrowth: a library of 1,743 free fonts, served from your own domain
Pick any of 1,743 open-licensed font families for headings and body text. The files are served from your site's own domain, so visitors never load anything from Google or any other third party.