Version 2.1.70
- Security: Fix CSRF protection for the
netmountcommand - Security: Fix MIME validation during ZIP archive extraction
- Security: Require cURL for URL uploads to prevent SSRF protection bypass in the
fsock_get_contents()fallback - Fix postMessage origin bypass and playsound DOM XSS
For technical details of [Security:], please refer to the published GitHub Security Advisories.
Full Changelog: 2.1.69...2.1.70