Skip to content

Version 0.3.0

Choose a tag to compare

View all tags
@hackmajoris hackmajoris released this 05 Oct 10:21
· 11 commits to main since this release
v0.3.0
58ad8d8

New Features

  • management page at http://<api-addr>/: list shares with link, expiry, size and password mark; copy, renew or delete them. Served only on the API address (localhost or tailnet), never through the public tunnel 58ad8d8

Security

  • the API rejects browser requests from other sites (Origin check), so a web page you visit can no longer make your browser upload, renew or delete shares 58ad8d8
  • the API rejects Host names other than IPs, localhost, single-label names, *.ts.net and *.local (DNS rebinding); reaching the API under another DNS name now gets 403 58ad8d8
Assets 7
Loading