Skip to content

v0.7.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Oct 00:13
· 20 commits to main since this release
v0.7.5
f4f20bd

Security

  • Validate remote media URL schemes, DNS answers and every redirect, block private targets by default, and pin connections to validated addresses to prevent DNS rebinding.
  • Block NAT64 and 6to4 addresses that embed a private IPv4 address.
  • Limit remote media downloads to 50 MiB, five redirects and a 30 second overall timeout by default. Add client size and timeout settings and explicit private URL opt-ins.

Changed

  • README and site add a labelled install line that also adds ~/.local/bin to ~/.profile, and a pinned line on the site.

Full Changelog: v0.7.4...v0.7.5

Assets 9
Loading