v1.4.0

Warning

This release fixes a remote arbitrary file overwrite vulnerability. Updating to this version is highly recommended. A CVE has been requested.

Features

• add "creatorEmail" config bariable to share recipient email message (c7dacb2)

Bug Fixes

• remote arbitrary file overwrite on file upload endpoint (6cf5c66)

v1.3.0

Features

• add 'secureCookies' configuration variable to explicitly set the secure flag and prevent confusion (4ce6420)
• add confirm dialog for leaving the page if an upload is in progress (d8084e4)

Bug Fixes

• improve share completed dialog redirection for reverse shares (4ef7ebb)
• prevent deletion of last admin account (e1a5d19)
• throw error if no disk space is left (c26de4e)
• use current window url instead of app url in frontend (6f45c3b)

Sponsors

Thank you @jwdoll and @wlburks for your tips. I really appreciate it ❤️

v1.2.4

Bug Fixes

• don't enforce password lenght for sign in form because of LDAP (2fea1a5)
• use app name as totp issuer (c89ca7e)

v1.2.3

Warning

This release addresses a vulnerability, and it is recommended to update to this version.

Bug Fixes

• share password can be bypassed if a deleted share with the same id was visited before (acbff6e) thanks for reporting @alexlehm

v1.2.2

Bug Fixes

• admin: change general config icon to gear (#649) by @edbourque0
• environment variable API_URL can't be changed (fe085b5)

v1.2.1

Bug Fixes

• disallow passwort reset if it's a ldap user (2e69224)
• error message for invalid max use count of reverse share (613bae9)
• share can't be created if an invalid email is entered in mail recipients (d5cd300)
• trim username, email and password on sign in and sign up page (77a092a)
• oauth: add post_logout_redirect_uri to OAuth logout redirect URI (#638) by @marvinruder

v1.2.0

Features

• oauth: add ability to limit user IDs for Discord authentication #621 by @COMPLEXWASTAKEN
• oauth: Add option to logout from OpenID Connect provider #631 by @marvinruder

Bug Fixes

• use unique port env variable for backend (d6b8b56)

v1.1.3

Features

• improve the LDAP implementation (#615) by @WolverinDEV

Bug Fixes

• omit invalid username characters in oidc registration (adc4af9)

v1.1.2

Bug Fixes

• disable auto completion for email recipients and share password (ee73293)
• enable secure cookies if app url starts with https (69752b8)

v1.1.1

Features

• add environment variable to trust the reverse proxy (b13a81a)

Bug Fixes

• disable email login if ldap is enabled (d9cfe69)