Releases: jesec/flood
Releases · jesec/flood
Release v4.1.2
Release v4.1.1
- Transmission fixes:
- Set tags while adding torrents
- Set trackers
- New translations
- Czech, thanks to Jan Březina
- French, thanks to @Carryozor
- German, thanks to @chint95
- Romanian, thanks to @T-z3P
Release v4.1.0
- Configuration is now schema validated before the start of Flood server
- No action required if you use (preferred and default) CLI configuration interface
- This ensures that when the config.js needs to be updated, the failure happens loud and early
- Check shared/schema/Config.ts for more details
- Enforces that the length of secret must be larger than 30
- Secret can be brute forced locally without interaction with the server
- However, an attacker must get a valid token (generated by proper authentication) first
- If all users are trusted, attackers have no way to get a valid token
- However, an attacker must get a valid token (generated by proper authentication) first
- Secret is used to sign authentication tokens but it is NOT linked to the password
- Attacker may log into Flood as any user if they have the secret
- However, they are still constrained by capabilities and settings (such as
--allowedpath
) of Flood
- However, they are still constrained by capabilities and settings (such as
- Attacker may log into Flood as any user if they have the secret
- Secret can be brute forced locally without interaction with the server
Other changes:
- Tag selector preference:
- Single selection
- Multi selection
- UX enhancements to tag selector
- Suggest destination based on selected tag
add-urls
andadd-files
API endpoints no longer fail ifdestination
property is not provided- Download destination fallback has been implemented:
- Tag-specific preferred download destination
- Last used download destination
- Default download destination of connected torrent client
- This makes things easier for API users
- No direct impact on Flood itself
- Download destination fallback has been implemented:
- Remember last used "Add Torrents" tab
- Remove center alignment of certain modals to align with global styles
- Disallow browser's input suggestion when tag selector or folder browser is open
- Don't pop up the browser menu on right click while context menu is open
- Experimental standalone (single-executable) builds
- New translations
- Bump dependencies
- Bug fixes:
- Properly handle "error" alerts (display "❗" icon instead of "✅" icon)
Release v4.0.2
Release v4.0.1
* Fix the unreliable clear all notification button * Bump dependencies
Release v4.0.0
- Experimental multi-client support
- qBittorrent
- Transmission
- Stabilized and documented public API endpoints
- Defined and documented internal interfaces, data structures and APIs
- Better documentation for users and developers
- Full migration to TypeScript
- Reasonable test coverages for API endpoints
- Torrent creation support
- Add torrents as completed
- Dropdown selector for existing tags
- Seeding status in status filter
- Set tracker URLs of torrents
- Improved handling of rendering, updating and scrolling of torrent list
- Preliminary tests show that Flood can now handle 500,000 torrents at least in the frontend.
- Note: real-world performance depends on other factors such as method call and deserialization operations in the backend and data transfer between backend and frontend.
- Better performance, less memory and CPU consumption in both frontend and backend
- New translations
- Chinese (Traditional), thanks to @vongola12324
- Czech, thanks to Jan Březina
- French, thanks to @zopieux and @Mystere98
- German, thanks to @chint95
- Bug fixes
- Security enhancements
- Dockerfile revamp
- Native build tools no longer needed as native dependency is replaced with WebAssembly variant
- Server is packed before distribution, reduced number of dependencies in production, faster installation
-----BEGIN PGP SIGNATURE-----
iQFBBAABCgArFiEElsZPMCZQTUzZLTai0uSYfcYwogQFAl+pCwYNHGpjQGxpbnV4
LmNvbQAKCRDS5Jh9xjCiBOEXB/4rJpAlosbFPg6cZEzn94CQk17qSJKKh8lHfWrv
CwS2hN2rZ/2/eazQNc9VzbvKfN9tlNXbPEx2RtRheqPVDbchh0Kd9cR/F91AzUvk
8X656iSLt6PwmjWfrES9MbwHcH4uOImjLt1tWKvTNFCtjj0Rff6YytQEBG2dATwu
NhtS7f/T31vXNkvmTAmK/mjeMU5v8uJhXuRRTQgLL7Mh3CXcINNNJZ3XPMOpmt1Y
UQ57tSSdPQlnj/ZFyHH+VjLFuofV6k5gsj0Ymu+NSH7cC0hGNme6hAt8yEdwkeCS
419UUOYNZqZ2xV8i1ph/S6Wn+l1OCfAF3753oAxmZF4pdqaT
=ugQL
-----END PGP SIGNATURE-----