Skip to content

v.4.3.0

Latest
Latest

Choose a tag to compare

View all tags
@polius polius released this 20 Sep 09:30
v.4.3.0
5283525
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Fixed

  • Firefox: small-file downloads no longer fail. In some cases, downloading a small file in Firefox would error with a 404. This is fixed. (#52)
  • Security hardening: the relay server can no longer be used to probe private networks. Someone with temporary credentials could previously relay connections into the server's internal network (SSRF). Relay targets in private IP ranges (LAN, CGNAT, IPv6 local) are now blocked. (#53)
  • Better error when the credential rate limit is hit — the API now answers 429 ("slow down") instead of 503 ("server broken"). (#53)

Full Changelog: v.4.2.0...v.4.3.0

Assets 2
Loading