Skip to content

v3.12.0

Latest

Choose a tag to compare

@syswave-dev syswave-dev released this 21 Sep 11:25
64abf90

Security release, closes #58.

  • Share ids are now 128 random bits (32 hex). Existing 8-character links keep working.
  • /s/:id throttles lookups of unknown ids (120/min per IP, 429 + Retry-After). Valid links are never throttled.
  • /api/stream validates the URL before the cache lookup, matching /api and the MCP tools.
  • SECURITY.md added; private vulnerability reporting enabled.

Full details in CHANGELOG.md.