Skip to content

librtmp2-server-panel 0.1.1

Choose a tag to compare

@github-actions github-actions released this 10 Jul 17:28
179ac71

Security

  • Reject panel passwords shorter than 12 characters at startup when
    REQUIRE_LOGIN is enabled, closing an online brute-force path against the
    default admin account
  • Reject unrecognized REQUIRE_LOGIN values (e.g. a typo like Tru) at
    startup instead of silently falling back to disabling the login gate
  • Require SECRET_KEY to be at least 32 characters at startup, blocking a
    trivially brute-forceable session-signing secret