VibeNVR v1.30.9

🚀 Release v1.30.9

📝 Summary

VibeNVR v1.30.9 introduces a critical security patch resolving a hardcoded JWT secret vulnerability, enhances defense-in-depth via HTTP security headers, and implements powerful database query optimizations for faster API performance.

🛠️ Key Improvements

• 🛡️ Security: Fixed a severe vulnerability by replacing the hardcoded fallback JWT secret with dynamic, cryptographically secure generation (secrets.token_urlsafe(32)).
• 🛡️ Security: Integrated robust HTTP security headers (X-Frame-Options, CSP, HSTS, X-XSS-Protection) directly into the FastAPI middleware layer.
• ⚡ Performance: Eliminated an N+1 database query in the users API leveraging selectinload, drastically improving response times.
• 📚 Documentation: Updated the Wiki, README.md, and SECURITY.md to accurately reflect new security behaviors and session invalidation rules.

🙌 Contributors

• @spupuz: Led the comprehensive security overhaul, HTTP headers integration, and critical database optimizations. Thank you for your continued dedication to securing VibeNVR!