focus

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

no vulnerabilities since 2023-07-23

• there is a discord server with an @everyone in case of future important updates
• v1.8.7 (2023-07-23) - CVE-2023-38501 - reflected XSS
• v1.8.2 (2023-07-14) - CVE-2023-37474 - path traversal (first CVE)

new features

• remember and restore scroll position when leaving the textfile viewer

bugfixes

• the request-smuggling detetcor was too strict, blocking access to textfiles with newlines / control-codes in the filename
• focus and text selection in messageboxes was still jank, mainly in firefox and especially phones

other changes

• the banhammer now applies on attempts at request-smuggling and path traversals
  • these were merely detected and rejected before, might as well bonk them
• reject bad requests with a terse 500 instead of abruptly disconnecting in some cases
  • stops firefox from rapidly spamming additional attempts

---

⚠️ not the latest version!