v1.6.16

What's Changed

Security

• Fixed unauthenticated SSRF: /api/test-discord-webhook and /api/test-webhook now require @login_required

New Features

• Added Rescan Image / Video Dates action in Settings - re-extracts and overwrites dates for all videos and images using filename/EXIF metadata, runs in the background

Bug Fixes

• Fixed Discord/webhook notifications sometimes sending before the video thumbnail was ready for large or high-bitrate uploads
  • Poster generation now uses fast keyframe seeking (-ss before -i) instead of full decode, preventing timeouts on large files
  • Webhooks are only fired after confirming the poster was successfully written to disk; falls back to first frame if the configured seek position fails
  • Bulk import path now generates metadata and posters before sending notifications (previously fired immediately after DB insert)
• Image scanning now uses EXIF/filename date extraction instead of file modification time for more accurate dates