Skip to content

Silo v0.2.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Aug 21:07
v0.2.3
a96fdda
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new in 0.2.3

A security hardening release.

Security

  • Warning when credential storage isn't encrypted. On a machine with no OS keychain, connecting a GitHub account falls back to storing the token in the local database. Settings now shows a clear warning above the account sections before you connect. (#20)
  • SSRF guard on native requests. A custom SiloAPI base URL and every mod download are validated first: HTTPS only (plain http allowed only to localhost), and never a loopback, link-local, private or CGNAT address. (#20)
  • Hardened native command boundary. Loadout, mod-set and report export and import enforce the expected file type and reject .. traversal, and config and mod-settings reads are confined to the FS25 user directory. No behavior change for normal use. (#20)

Full details: CHANGELOG.md

Beta release. Download the installer for your OS below.

Silo is open source and unsigned — Windows SmartScreen / macOS Gatekeeper
may warn on first launch. You can inspect or build from source at any time.

Assets 19
Loading