v1.9.4

Security

• Rate limiting on all write endpoints (/upload, /text, /channels) — 60 drops per 5 minutes per IP
• Magic number validation on file uploads — file content must match declared extension
• Filename sanitisation — strips path traversal characters and null bytes
• Forced download for executable file types (SVG, HTML, JS, etc) — prevents XSS via malicious uploads

Mobile

• Context menus and dropdowns now slide up as bottom sheets on mobile
• Long text items collapse with a "Show more" toggle — walls of text no longer flood the feed
• Code blocks scroll horizontally with proper touch support on mobile
• Haptic feedback on file upload completion (supported browsers)

PWA

• Add to Home Screen support — install Instbyte as a standalone app on iOS and Android
• Dynamic manifest reflects your branding config (app name, theme color)

Docs

• Terminal usage section — pipe logs, stack traces, and files directly from curl
• Security and PWA features documented in README
• Contributing section updated with test suite info

Fixes

• npm start and npx instbyte now correctly display the running port and network URL