<ul><li>pwa_visitor_type.php: guarded all Chart.js data arrays (total_new_returning_labels/values, new_vs_returning_dates/new_user/returning_user/step_count) with Array.isArray() fallbacks — prevents TypeError in generateLabels when API returns undefined/null fields</li><li>domain.controller.php + Domain.class.php: ob_start wrapper around native_api action, null-pointer chain guards on curlAnalyzeTools and ajax_curl_native_api cURL false-return</li><li>Networks module: fixed N+1 query, path traversal, ob_start on controller</li><li>Onboarding widgets: fixed __TOKEN undefined, DashboardController/TOKEN/ICON_LOADER JS vars missing, DataTables order:false TypeError, responsive:true in hidden tab</li><li>webapp.php: removed duplicate script block, fixed placeholder tab content</li></ul>