Skip to content

SteamEdge 1.3.2

Choose a tag to compare

View all tags
@Miabeyefendi Miabeyefendi released this 02 Oct 13:59
· 132 commits to main since this release
1.3.2
b6ea19d

Full Changelog: 1.3.1...1.3.2

Security update: Electron 41 and patched build tools. No feature changes.

Fixed

  • Electron 39 had five high severity advisories. Popups and windows opened from sandboxed pages could drop the sandbox, file and HTTP handlers allowed cross-origin reads, and <webview> could enable Node.js in workers. SteamEdge moves to Electron 41.10.7, where all five are fixed. Electron 41 also drops the old download chain (@electron/get, got, extract-zip), which removes about sixty build-time packages.
  • Build-time advisories. undici (six advisories) and brace-expansion (one) are only used by the packager and never ship in the app; both are pinned to patched versions through overrides. ip-address, used by the Steam connection's proxy support, moves to 10.7.3.
  • Two code scanning warnings. The plural form picker strips markup from a value to find its number; the stripping now also removes stray angle brackets. The value was never written back as HTML, so this closes a warning rather than a hole.

As always: never share your settings/ folder - it holds your Steam login token.

SHA-256 (SteamEdge-v1.3.2-win-x64.rar): 38fc5a55d56be415a54ab734ee842e9b731dc4ab6ad8f926634919b64de2fe31

Assets 3
Loading