[Added, Improved, Fixed] Classet platform release

Added

JobDiva sync window control

The JobDiva ATS integration now lets each organisation decide how far back to look for new applicants. A new “fetch window (hours)” field appears in the ATS settings panel so you can shorten the window for faster syncs or extend it to be absolutely sure no candidates are missed. Existing customers keep the previous 1-hour setting—no action required.

Improvements

Jobs list location filter now searches the full job catalogue, not just the first page, so every matching opening is returned
Voice interview transcripts keep candidate and Joy turns in the correct chronological order for easier review
Campaign start-time handling respects daylight-saving changes and falls back gracefully when a browser provides no timezone
Settings → Developers shows a clear notice (instead of empty buttons) when branch-scoped admins lack API-key or webhook permissions
Indeed Sponsored Jobs connection checks are rate-limited, preventing accidental API lockouts and showing “couldn’t verify” after too many rapid requests
Team-management rules now prevent one owner from editing another owner’s role, aligning with expected permissions
Creating a company from a domain now falls back to a manual form if Clearbit is unavailable, instead of returning an error

Fixes

Closed 13 security findings, including removal of obsolete Webflow webhooks, stricter role checks, and blocking forged candidate emails
AI job-description, logo and other metered routes now return clear 413/429 messages for oversized or excessive requests instead of hanging
Resume parsing and customer webhooks now block requests to private network addresses, eliminating rare time-outs and security risk
Indeed Apply submissions and event-update webhooks now require valid signatures, preventing unverified data from reaching your account
System logs no longer store session cookies, bearer tokens or full inbound email bodies, protecting sensitive information
Creating a campaign no longer throws a 500 error when the browser lacks a timezone or when an invalid start date is entered
Rate limiting headers are now respected on ATS status checks to keep the dashboard responsive even during network issues