Skip to content

0.6.1 - security fixes

Latest
Latest

Choose a tag to compare

View all tags
@modulout modulout released this 08 Oct 16:57
v0.6.1
9911deb
  • Security: a paid REST route could be read free by changing the letter case of the URL (WordPress matches routes case-insensitively, the plugin did not). Fixed; saved routes are lowercased.
  • A rate limit or refusal from P2Flux is answered with 402 again, never with free content (even with "API down: free") and never with 503 for every agent. Junk payment headers are limited per client address before P2Flux is asked.

SHA-256 of the ZIP: ce250612a58ca6482a854f77d4c104abc47addf4906b533f93badbc23422949b

Assets 3
Loading