Skip to content

v0.2.2

Choose a tag to compare

View all tags
@exa-s exa-s released this 31 Oct 02:43
· 16 commits to main since this release
v0.2.2
f309bbf
  • Security: the viewer answers only its own Host (127.0.0.1:<port> or localhost:<port>) and refuses writes from other origins or without a JSON content type. Before this, any page open in the browser could send simple cross-origin writes, and DNS rebinding could read memories.
  • README: a "Verify it works" walkthrough, a Privacy and security section, and Backups, upgrades, and support.
Assets 2
Loading