OnionShare 2.6.2

What's new:

• Security fix: Removes newlines from History item path
• Security fix: Set a maximum length of 524288 characters for text messages in Receive mode
• Security fix: Allows only specific ASCII characters for usernames and removes control characters
• Security fix: Forcefully disconnect user from chat on disconnect event
• Security fix: Handle username validation excpeptions to prevent silent joining

OnionShare 2.6.1

What's new:

• Release updates: Automate builds with CI, make just 64-bit Windows release, make a single universal2 release for both Intel and Apple Silicon macOS
• Upgrade dependencies, including Tor, meek, and snowflake
• Bug fix: Restore the primary_action mode settings in a tab after OnionShare reconnects to Tor
• Bug fix: Fix issue with auto-connecting to Tor with persistent tabs open
• Bug fix: Fix packaging issue where Windows version of OnionShare conflicts with Windows version of Dangerzone
• Bug fix: Fix 'Use a bridge' checkbox state change
• Bug fix: Raise error from waitress if not shutdown

OnionShare 2.6.1.dev1

This is a development release.

OnionShare 2.6

What's new:

• Major feature: a new 'Quickstart' screen, which enables toggling on or off an animated automatic connection to Tor. This allows configuring network settings prior to automatic connection.
• Major feature: Censorship circumvention. Use new features in the upstream Tor API to try to automatically obtain bridges depending on the user's location.
• New feature: automatically fetch the built-in bridges from the upstream Tor API rather than hardcode them in each release of OnionShare.
• New feature: keyboard shortcuts to access various modes and menus, and accessibility hints
• Bug fix: Temporary Directory for serving the OnionShare web pages was broken on Windows
• Packaging: Packaging is more automated, and Linux Snapcraft releases are available for amd64, arm64, and armhf
• Miscellaneous: Many dependency updates and web page theming improvements

OnionShare 2.6.dev2

Early release.

OnionShare 2.6.dev1

Early release to test CI builds.

OnionShare 2.5

What's new:

• Security fix: Sanitize the path parameter in History item widget to be plain text
• Security fix: Use microseconds in Receive mode directory creation to avoid potential DoS
• Security fix: Several hardening improvements for session and username management in Chat mode, to prevent impersonation and other issues
• Major feature: Obtain bridges from Moat / BridgeDB (over a domain-fronted Meek client)
• Major feature: Snowflake bridge support
• New feature: Tor connection settings, as well as general settings, are now Tabs rather than dialogs
• New feature: User can customize the Content-Security-Policy header in Website mode
• New feature: Built-in bridges are automatically updated from Tor's API when the user has chosen to use them
• Switch to using our stem fork called cepa, which is now published on PyPi so we can build it in releases
• Various bug fixes

OnionShare 2.4

What's new:

• Major feature: Private keys (v3 onion client authentication) replaces passwords and HTTP basic auth
• Updated Tor to 0.4.6.7 on all platforms
• Various bug fixes

OnionShare 2.4.dev1

This is a pre-release for testing and for translators.

Documentation for version 2.4.dev1 is here.

Windows installer: OnionShare-2.4.dev1.msi
macOS installer: OnionShare-2.4.dev1.dmg
To install in Linux: snap install --devmode ~/Downloads/onionshare_2.4.dev1_amd64.snap

OnionShare 2.3.3

What's new:

• New feature: Setting for light or dark theme
• Updated Tor to 0.4.6.7 for Linux, 0.4.5.10 for Windows and macOS
• Various bug fixes