15 releases 15 tags

RSS feed

• v0.3.4 6ef4781050

  Compare

  v0.3.4 Stable

  girlbossceo released this 2024-05-17 07:42:25 +00:00 | 1827 commits to main since this release

  conduwuit

  Release 0.3.4

  Hi everyone! conduwuit 0.3.4 has been released. This is a small maintenance release in preparation for the upcoming v0.4.0 release later this week. No new features were added.

  conduwuit was officially added to Complement, and support for running the Content-Disposition safety tests was added there too. (https://github.com/matrix-org/complement/pull/723)

  Through those Complement tests, we found one more edge-case Content-Type being allowed as inline (image/svg+xml) and currently we now pass all 3 Content-Disposition Complement tests after fixing that.

  In addition, we now fully distrust the client or remote server's Content-Type for all media (uploads, thumbnails, and downloads) and return what we detected the file is (with a valid fallback to application/octet-stream).

  Both of these further improve client security by making sure we detect the true file fully, and we send the correct behaviour to web browsers.

  The Debian packaging has been fixed as it's been broken for a while and partially in upstream, some CI improvements were made, and cleaned up some documentation and example configs in our repo.

  Commit history: https://github.com/girlbossceo/conduwuit/compare/v0.3.3...v0.3.4

  GitHub Releases | Docker Hub | NixOS

  Liberapay | GitHub Sponsors | Ko-fi

  Chat with us in #conduwuit:puppygock.gay

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • aarch64-unknown-linux-musl-jemalloc.deb
    10 downloads · 10 MiB
  • aarch64-unknown-linux-musl.deb
    7 downloads · 9.8 MiB
  • oci-image-aarch64-unknown-linux-musl-jemalloc.tar.gz
    6 downloads · 17 MiB
  • oci-image-aarch64-unknown-linux-musl.tar.gz
    6 downloads · 16 MiB
  • oci-image-x86_64-unknown-linux-musl-jemalloc.tar.gz
    6 downloads · 18 MiB
  • oci-image-x86_64-unknown-linux-musl.tar.gz
    6 downloads · 17 MiB
  • static-aarch64-unknown-linux-musl
    9 downloads · 37 MiB
  • static-aarch64-unknown-linux-musl-jemalloc
    9 downloads · 38 MiB
  • static-x86_64-unknown-linux-musl
    16 downloads · 43 MiB
  • static-x86_64-unknown-linux-musl-jemalloc
    10 downloads · 44 MiB
  • x86_64-unknown-linux-musl-jemalloc.deb
    14 downloads · 11 MiB
  • x86_64-unknown-linux-musl.deb
    12 downloads · 11 MiB