mirror of
https://github.com/9001/copyparty.git
synced 2026-09-24 11:40:31 +01:00
-
thumbex
feyisay07 released this | 61 commits to hovudstraum since this release
📅 Originally published on GitHub: Mon, 17 Aug 2026 22:19:23 GMT
🏷️ Git tag created: Mon, 17 Aug 2026 21:57:27 GMT
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an
@everyonein case of future important updates, such as vulnerabilities (most recently 2026-07-27)recent important news
- v1.20.19 (2026-07-27) fixed an FTP-server vuln (upload outside defined volumes)
- v1.20.17 (2026-07-06) fixed a vuln when a volume has both filekeys and dirkeys enabled
- v1.20.17 (2026-07-06) introduced csp nonces, possibly breaking some javascript-based plugins
🧪 new features
- #1602 custom thumbnail extractors; docs/example (thx @kamaeff!)
18648050dbc6df81 - #1604 u2c: password can be provided in env-var
U2C_PW(thx @shermanhlc!)47297475 - wopi: option --wopi-accs to limit who's able to use the feature
78a4ee49- also fixes wopi on servers where user does not have read/write-access to root volume
- also restricts the token to just that one file; good if the wopi-client is some cloud thing that shouldn't be trusted
- #1591 wopi: use persistent file-ID which is necessary for real-time collab (thx @kamaeff!)
efcf96e3 - #1605 the lightbox can show svg images now
825f1c94
🩹 bugfixes
- up2k: client could waste a little bandwidth while recovering from a network glitch
18791c57 - if
PRTY_CONFIGis set to a config-file that is also autodetected, then explain the misconfiguration instead of crashing like before14e2d79b - wopi: fix session-timeout hint to clients (thx @kamaeff!)
92c3f32e - js: fix chance of duplicate prologue on very first page visit
eeb399e3 - js: fix panic on image dragdrop out of the browser window
dcc0abd6
🔧 other changes
- up2k: client now detects when server or reverseproxy is incorrectly configured with an impractically small request-body-size-limit, crashing the website with an explanation how to fix it
f19ef033- also allows setting the chunksize all the way down to 1 megabyte when absolutely necessary (bad idea, slow)
- new option --allow-svg-js if you really want that
566de65f - shares: harden single-file shares some more
21c2c7289ff6a71a- just removing footguns (motivated by a bug-report that was a false-positive)
- copyparty.exe: upgrade to python 3.14.7 from 3.13.14
8b6e8972- larger and slightly faster (compensated for the size bloat by making the text-image-generator more shitty)
🌠 fun facts
- the thumbex example is also a cool example how relevant the "pseudo" in PRNG can be; with
random.randrangeinstead ofos.urandom, first run followed by restarting copyparty and another run...heh
⚠️ not the latest version!
Downloads
