Skip to content

v1.7.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Mar 23:35
· 109 commits to main since this release
v1.7.1
e862823

1.7.1 (2026-03-14)

Bug Fixes

  • add Content-Security-Policy and Permissions-Policy headers (887b45a)
  • add streaming size limit, pre-check upstream Content-Length, remove hop-by-hop header (ad750af)
  • address re-review findings — cap seen-ID cache, add stream error event (45074be)
  • enforce rootKey minimum entropy, restrict announceKey directory permissions (ffc8b05)
  • harden auth — HMAC-based timing-safe comparison, NIP-98 replay prevention, case-insensitive hex pubkeys (c8bc50c)
  • pass maxBodySize to streaming proxy instead of using hardcoded 100 MiB (18ae958)
  • require rootKey to be exactly 64 hex chars, matching toll-booth (79ceb2a)
Assets 2
Loading