Skip to content

4.1.3

Choose a tag to compare

View all tags
@gelatinescreams gelatinescreams released this 16 Feb 01:57
4.1.3
56335c0

Version 4.1.3 /\ 2-14-26 Styles, bugs and TheOneFile_Verse 1.6.0

  • Fixed an issue where scrolling down on modals was not possible on some mobile environments
  • Fixed an issue where draw and add connection buttons would show at inverse times
  • Fixed an issue where the draw button would dissapear on mobile in some rare cases during import
  • Fixed an issue where JSON import was not working in networkening edition
  • Fixed one (1) missing and incorrect language keys from networkening edition
  • New Demo

TheOneFile_Verse 1.6.0

2/15/26 Theonefile_verse 1.6.0 Security hardening, chat overhaul, UX improvements

  • Security Hardening

    • Timing safe comparison for legacy password hashes using crypto.timingSafeEqual
    • Length padded admin password comparison to prevent length oracle attacks
    • Full HTML entity escaping on chat messages and usernames (& < > " ')
    • Content Security Policy headers applied to all pages
    • OIDC provider name/type XSS protection with esc() in admin panel
    • PUT method added to CORS allowed methods
    • 50MB file upload size limit enforced before processing
    • Generic error messages on registration and disabled accounts to prevent user enumeration
    • CRLF injection prevention in all email headers (from, to, subject)
    • STARTTLS downgrade now throws error instead of continuing in plaintext
    • Template subject variable CRLF sanitization

  • Chat System Overhaul

    • Chat message persistence sffrf
    • Typing indicators with "user is typing" display
    • Message replies with quoted reference
    • @mention highlighting with notification sound
    • 500 character counter with visual warning
    • Emoji picker with most common emojis
    • Relative timestamps (2m ago, 1h ago)

  • UX Improvements

    • iOS safe area inset support on collab bar, modals, toasts
    • User avatars with colored initials in user list
    • Connection status indicator (green/yellow/red dot with pulse)
    • Offline/reconnecting banner with manual reconnect button
    • Stacking notification toasts with slide animations
    • Full screen mobile chat at 640px breakpoint
    • Smooth CSS transitions on remote cursors
    • Room expiry countdown display for auto destruct rooms

  • Server

    • Typing message type with dedicated rate limit (5 bucket, 1/sec refill)
    • Chat history cleanup on room deletion

2/14/26 Theonefile_verse 1.5.2 Auth flow fixes, error logging, version tracking

  • Auth Flow Fixes
    • Fixed setup page JavaScript SyntaxError that prevented form submission
    • Fixed missing SetCookie header on /api/setup route
    • Fixed password reset form variable shadowing window.confirm
    • Added defensive semicolons to OIDC button rendering across all forms
  • Error Logging
    • All server side catch blocks now log errors with tagged prefixes
    • Tags: [Setup], [Login], [Register], [AdminLogin], [API], [Backup], [Update], etc.
  • Infrastructure
    • Docker entrypoint now handles volume permissions automatically via su exec
    • Database migrations use safe column existence check before ALTER TABLE (BUN FIX)
    • Added /api/version endpoint for build verification
    • Version displayed in startup logs
    • CSRF cookie now includes HttpOnly flag

the-one-file.html
theonefile-networkening.html

Assets 2
Loading
1 Join discussion