---
title: 5.5.0
slug: swfh-release-notes/550
icon: 🔎
createdAt: 2025-10-27T04:14:42.564Z
---

Version : 5.5.0

Date : 29/08/2025

## 📝Important Information

Please find the following end of sale and end of support dates:

- End of Sale - **August 2026** 
- End of Support - **August 2028** 
- Runtime - .NET 8 (End of Support : **November 2026**)

## ⭐Improvements

- SWFH-1564 - Security Enhancements for SWFHServer.
- SWFH-1311 - Remediation for Snyk Vulnerabilities.

## 🐞Bug Fixes

- PRODQA-4398 - The license file is not being downloaded from the SWFH server to the remote security folder when the license has expired.
- PRODQA-4304 - The agent's status remains displayed as logged in even after the SWFHWorkerService has stopped.
- PRODQA-4353 - The supervisor is not getting messages from the agent.

## 🔧Application Configuration Changes

For **SWFH-1564** a new securityconfigurations.json file is added in the client configurations folder.

:::BlockQuote
\{
  "SecuritySettings": \{
    "CORSSettings": \{
      "AllowAll": false, // if allowall is true then below cors methods/origins/headers will not apply
      "AllowedOrigins": \[ "\*" ], // allowed origins - if allowed all and https\://localhost, https\://tetherfi.com/.
      "AllowedMethods": \[ "GET", "POST", "PUT", "DELETE" ], // Allowed Http methods
      "AllowedHeaders": \[ "Origin", "X-Requested-With", "Content-Type", "Accept" ] // Add CORS Headers
    },
    "CookiePolicyOption": \{
      "Secure": false, //set true for "Always", false for "SameAsRequest". SameAsRequest will allow to set cookies over http/https
      "HttpOnly": false //set true for "Always", false for "None".
    },
    "CustomHeaders": \[ // add headers to http protocol
      \{
        "Key": "X-XSS-Protection",
        "Value": "1; mode=block"
      },
      \{
        "Key": "X-Content-Type-Options",
        "Value": "nosniff"
      },
      \{
        "Key": "X-Frame-Options",
        "Value": "SAMEORIGIN"
      },
      \{
        "Key": "Referrer-Policy",
        "Value": "no-referrer"
      },
      \{
        "Key": "X-Permitted-Cross-Domain-Policies",
        "Value": "none"
      },
      \{
        "Key": "Feature-Policy",
        "Value": "accelerometer 'none'; camera 'none'; microphone 'none';"
      }
    ],
    "RemoveHeaders": \[ "X-Powered-By", "Server" ] // Remove default headers from http protocol
  }
}
:::

##