Skip to content

v0.1.6 — Full codebase audit & fixes

Choose a tag to compare

View all tags
@Tgbjr2025 Tgbjr2025 released this 25 May 11:47
v0.1.6
ec54bc8

Full two-round audit with 16 critical + 17 high + 19 medium fixes.

Highlights

  • WS reconnect loop fixed — no more dropped messages on reconnect
  • SSRF security fix — DNS-hierarchy allowlist on authenticated image fetch
  • Typed WebSocket event handlers: retract, reaction, read receipts, typing indicator
  • Retracted messages show "This message was deleted."
  • New block/unblock API (/v4/blocks)
  • New tap API (/v3/taps)
  • Bulk profile fetch cache — fewer redundant API calls
  • Inline form error display on sign-up and password reset
  • Typing indicator in chat nav bar
  • All 40 TypeScript tests + 2 Rust tests passing

⚠️ Newer version available: see v0.1.7

Assets 3
Loading