Web
80eight Web — v2.5.0
The web security review closed end to end, a move to hardened sessions, card pay-in and request-to-pay.
Security and privacy
- A full set of security headers now ships with the web app — strict transport security with subdomain coverage, cross-origin isolation, a permissions policy, a referrer policy, and content-type and framing protections. A content-security policy runs in report-only mode first, so it can be tuned against real traffic before it enforces.
- Sessions moved to hardened, browser-protected cookies. The browser no longer holds a bearer token: sign-in tokens, invite tokens and two-factor enrolment secrets no longer sit in browser storage, the address bar or the clipboard. One HTTP client, one authentication policy, every confirmation surface migrated — this is the load-bearing change in the release.
- Only the headers we intend reach the platform , on an explicit deny list written so a later change cannot quietly readmit one.
- Third-party tag management is gone from the signed-in app , with the content-security policy tightened accordingly.
- Security requirements fail closed. An unresolved requirement now blocks rather than passes, no source maps ship to production, off-origin navigation from a notification is refused, and the redirect guard and identity-verification SDK load are both hardened.
- Every finding from the review is closed , with automated code scanning, secret scanning and a blocking dependency-audit gate now running on every change.
Payments
- Consumer card pay-in — the payment methods enabled for you at checkout, a grouped funding chooser, real card and wallet marks, and settlement timing per rail. A refusal is scoped to that attempt rather than ending the whole flow.
- Request-to-pay — send a request, see your inbox, approve or decline.
- PayLinks match the Business PayLinks design , the list pages properly rather than silently truncating, and someone with no account and no app can pay a link in the browser.
Speed
- A faster start. The app no longer waits on two sequential sign-in calls before it begins loading your main screen, and the entry bundle is roughly 29% smaller. Content-hashed assets are served immutably instead of being revalidated on every visit.
Also
- Settings and Support rebuilt , with Support reachable before your verification completes.
- Signing out propagates across tabs.
- A render error is caught instead of white-screening the app.
- Document upload no longer strands you. Your documents had always uploaded; a follow-on internal record could fail and leave you stuck on the step. Fixed.
- Paying a link without an account works — an anonymous payer is no longer bounced to the sign-in screen.