Skip to content

1.0.8

Choose a tag to compare

View all tags
@soderlind soderlind released this 22 Aug 09:09
· 20 commits to main since this release
1.0.8
5c7dc0d
  • Harden the Restricted Site Access bypass: send no-cache headers on a keyed request so an unrestricted response can never be cached and served to the public, and accept the key only from the X-Kjeks-Key header (no query-string fallback) so it can't leak via logs, Referer, or history.
Assets 3
Loading