Security: the outdated diagnostic script admin/bitrix_server_test.php (lacking permission checks and performing self-updates via HTTP) has been replaced with a secure stub accessible only to administrators; upon update, the file itself, its proxy in /bitrix/admin, the log, and temporary files are deleted.
The server check has been rewritten: access is restricted to administrators with sessid verification; only safe checks remain (no file writing to /bitrix/admin, no phpinfo, no email sending, and no connections to arbitrary databases); a check for connection to the update server via HTTPS (port 443) has been added.
Compatibility with the main module version 25.300.0 and above: the results page loads jQuery 3 (the jquery extension has been removed from the core).
Requests to the speed check service are executed via HTTPS using the core HttpClient; the site address is validated, and service responses are displayed as text (XSS protection); CSRF protection (sessid) has been added.
The site address for checking is taken from the current request, not from the Referer header.
Compatibility with PHP 8.2+; full PHP opening tag in all files; upon module deletion, only its own service files are removed.