Skip to content

v2.5.10 — Encrypted API key

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Sep 21:01
· 6 commits to main since this release
v2.5.10
767d6a5

What's new

  • The CurseForge API key is no longer stored in the open. It used to sit in the app as plain text, where anyone could pull it out of the download with a single strings run. The build now ships it encrypted (AES-256-CBC, key derived with SHA-256) and the app decrypts it in memory; the passphrase never goes near the repository.
  • The key itself has been replaced, so the old one is out of circulation.
Assets 3
Loading