Skip to content

Version 1.1.0

Choose a tag to compare

View all tags
@roys roys released this 20 Oct 20:40
· 9 commits to master since this release
v1.1.0
9d8980d

Everyone running 1.0.3 or earlier should upgrade. This version fixes several security vulnerabilities.

Upgrading

Nothing else changes: same Java (8 or later), port and hdlserver.db, so your authorization key, actions and IFTTT applets keep working.

  • Installed with git clone: run git pull in ~/java-hdl-webserver and restart the server (or reboot, if it starts on boot).
  • Otherwise: stop the server, save hdlserver-1.1.0.jar below as hdlserver-LATEST.jar in place of the old one, and start it again.

If you open the web pages by a host name with dots in it (e.g. http://hdl.example.com:4567), allow it by starting the server with -Dhdlserver.allowedHosts=hdl.example.com. IP addresses and local names like raspberrypi or raspberrypi.local work as before. See Updating the server.

Changes

  • Security: Fixed several security vulnerabilities. Everyone running an earlier version should upgrade.
  • The web pages only answer to IP addresses and local host names, unless others are allowed.
  • Upgraded libraries, among them Spark to 2.9.4 and Jetty to 9.4.58.
  • Bugfix: Calling a dimmer action with a wrong key answered 500 rather than 401.
  • Bugfix: Calling a custom action that doesn't exist answered 500 rather than 404.
  • Bugfix: Deleting an action didn't always remove its aliases.
  • Bugfix: Creating an action now says whether it worked, and why not.
  • Bugfix: Actions called at the same time could get their commands mixed on the bus. They are now sent one at a time.
  • IFTTT's Maker service is now called Webhooks.
Assets 3
Loading