surtic86andClaude Opus 5.5 cf73052e0e Release 2.4.2 ...

Fixes the nine findings of a security audit of 2.4.1. The most
important: an anonymous uploader could fill the storage quota without
sending data, and a forged X-Forwarded-For header could get around the
limits on password attempts. Password attempts now also have a limit
per share, per login e-mail and for the system password.

Whoever entered the system password enters it once more after the
update. Update now: docker compose pull and docker compose up -d.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-22 15:36:31 +02:00

..

app.php

Release 2.4.2

2026-10-22 15:36:31 +02:00

cache.php

Cut over-engineering found by a repo-wide audit

2026-09-18 23:14:33 +02:00

filesystems.php

Cut over-engineering found by a repo-wide audit

2026-09-18 23:14:33 +02:00

fortify.php

Cut over-engineering found by a repo-wide audit

2026-09-18 23:14:33 +02:00

livewire-material.php

Let the admin choose one of eight colour profiles

2026-09-13 15:06:47 +02:00

livewire.php

Cut over-engineering found by a repo-wide audit

2026-09-18 23:14:33 +02:00

mail.php

Cut over-engineering found by a repo-wide audit

2026-09-18 23:14:33 +02:00

octane.php

Cut over-engineering found by a repo-wide audit

2026-09-18 23:14:33 +02:00

session.php

Fix the security audit's findings

2026-10-08 23:23:00 +02:00

uploads.php

Encrypt uploads in the browser and send them in chunks

2026-09-16 20:49:17 +02:00