Release tftp · 9001/copyparty

there is a discord server with an @everyone in case of future important updates
v1.8.7 (2023-07-23) - CVE-2023-38501 - reflected XSS
v1.8.2 (2023-07-14) - CVE-2023-37474 - path traversal (first CVE)

new features

TFTP server d636316 8796c09 acbb826 0287971
- based on partftpy, has most essential features EXCEPT for rfc7440 so WAN will be slow
- is already doing real work out in the wild! see the fantastic quote in the readme
detect some (un)common configuration mistakes
- buggy reverse-proxy which strips away all URL parameters 136c0fd
  - could cause the browser to get stuck in a refresh-loop
- a volume on an sqlite-incompatible filesystem (a remote cifs server or such) and an up2k volume inside d4da386
  - sqlite could deadlock or randomly throw exceptions; serverlog will now explain how to fix it
ie11: file selection with shift-up/down 64ad585

prevent music playback from stopping at the end of a folder f262aee
- preloader will now proactively hunt for the next file to play as the last song is ending
in very specific scenarios, clients could be told their upload had finished processing a tiny bit too early, while the HDD was still busy taking in the last couple bytes 6f8a588
- so if you expected to find the complete file on the server HDD immediately as the final chunk got confirmed, that was not necessarily the case if your server HDD was severely overloaded to the point where closing a file takes half a minute
  - huge thx to friend with said overloaded server for finding all the crazy edge cases
ignore harmless javascript errors from easymde 879e83e

the "copy currently playing song info to clipboard" button now excludes the uploader IP ed524d8
mention that enabling -j0 can improve HDD load during uploads 5d92f4d
mention a debian-specific docker bug which prevents starting most containers (not just copyparty) 4e797a7