What's New in v1.3.0
Production Server
- Replaced the Flask development server with Waitress
- No more "development server" warning in logs
- Handles multiple simultaneous requests properly (8 worker threads)
Pagination
- File lists now load 50 files per page
- Previous/Next and numbered page controls
- All filters (search, folder, sort, view) preserved across pages
- Keeps the dashboard fast even with large file collections
Security — CSRF Protection
- Added Flask-WTF CSRFProtect across the entire app
- Every form (login, register, upload, delete, share, rename,
restore, empty trash, change password, logout) now includes
a CSRF token - Upload and rename (XHR/fetch requests) updated to send the
token correctly - Protects against malicious cross-site form submissions
From the Community
- Mobile UI edge cases fixed
- Custom 404 / 403 / 500 error pages (contributed by @bnova7)
- Initial Python test suite added (contributed by @reory)
Upgrade Notes
If upgrading from v1.2.0, download and run the new
HomeVault_Setup.exe — it will detect your existing
installation and update files in place. Your .env,
database, and uploaded files are preserved.
Full Changelog
Contributors
reory and bnova7