06-01-2026 CF Security 2025 fixes and updates
Summary
This security release addresses critical vulnerabilities and strengthens input validation across multiple system endpoints. All identified security issues have been resolved to protect system integrity and user data.
Security Improvements
API Endpoint Security Hardened - Multiple API endpoints have been secured with improved input validation and protection against injection attacks.
Session Management Strengthened - Session ID generation has been upgraded to use cryptographically secure methods, preventing session prediction attacks.
Input Validation Enhanced - Input validation has been strengthened across form submissions and API requests to prevent malicious data from being processed.
Database Query Protection - Database queries have been updated to use parameterised statements, eliminating SQL injection vulnerabilities.
Document Category Endpoints Secured - Global Document Category endpoints now include proper payload validation and security checks.
06-01-2026 Standard AU Date Format
Summary
This release standardises date formats across the entire platform to use the Australian date format (DD/MM/YYYY). All modules in both the Client and Contractor applications now display dates consistently, improving readability and reducing confusion for Australian users.
Dashboard
Overdue Risk Actions Date Format Fixed - The Dashboard now displays overdue risk action dates in the standard Australian format.
Live Access
Sign-In Book Dates Standardised - Induction dates and induction expiry dates in the Sign-In Book now use the Australian date format.
Map View Sign-In Dates Updated - Sign-in dates displayed in the Map View now use the standard Australian format.
Mobile Apps Date Format Updated - The Live Access native mobile apps now display all dates in the Australian format.
Inspections
Action Due Dates Standardised - Action due dates in the Inspection Actions section now display in the Australian format.
Module-Wide Date Standardisation - All date displays throughout the Inspection module have been updated to use the standard format.
Risk Register
Date Formats Standardised - All date displays in the Risk Register module now use the Australian format consistently.
Suppliers Module
Work Order History Dates Fixed - Updated Expected Start and Completion Date logs in Work Order History now display in the Australian format.
Worker Document History Dates Fixed - Document history dates in Worker Details now use the standard format.
Supplier Last Login Date Fixed - The Last Login date on Supplier Details now displays in the Australian format.
Remove File Log Dates Fixed - Dates in Remove File activity logs now use the standard format.
Module-Wide Date Standardisation - All date displays throughout the Suppliers module have been updated.
Staff Management
Expiry Date Format Fixed - Expiry dates in Staff Details now display in the Australian format.
Reports
Competency Matrix Dates Fixed - Expiry dates shown when using the Expire Within filter in the Competency Matrix report now use the Australian format.
Forms Module
Client App Forms Dates Standardised - All date displays in the Client App Forms module now use the Australian format.
Contractor App Forms Dates Standardised - All date displays in the Contractor App Forms module now use the Australian format.
Contractor App - Documents
Date Formats Standardised - All document-related dates in the Contractor App now display in the Australian format.
Contractor App - Plant and Vehicles
Document History Dates Fixed - Dates in Plant Details document history now use the Australian format.
Module-Wide Date Standardisation - All date displays in the Contractor Plant and Vehicles module have been updated.
Contractor App - Training
Date Formats Standardised - All training-related dates in the Contractor App now display in the Australian format.
Contractor App - Workers
Date Formats Standardised - All worker-related dates in the Contractor App now display in the Australian format.
Contractor App - Licences
Date Formats Standardised - All licence-related dates in the Contractor App now display in the Australian format.