Skip to content

v0.6.2: security, discovery, UX, progress ETA - #22

Merged
bethropolis merged 5 commits into
mainfrom
dev
Jul 13, 2026
Merged

v0.6.2: security, discovery, UX, progress ETA#22
bethropolis merged 5 commits into
mainfrom
dev

Conversation

@bethropolis

Copy link
Copy Markdown
Owner

what changed in this version.

• Security headers (affects share), CORS
• added sending data from standard input --stdin (#21)
• Self-discovery fix, ReadTimeout, fingerprint guard, Wayland clipboard
• Discovery lifecycle cleanup, go.mod 1.26.3 (CVE-2026-33814)
• Transfer speed & ETA in progress bars

…tion

- Cap upload body to declared file size to prevent disk DoS
- Fetch remote fingerprint on send --ip for TLS certificate pinning
- Persist LastSeen and Available fields in peer cache
- Add --stdin flag for sending piped text input
- Add shell completion for --to flag from cached peers
- Add CORS and security headers middleware
- Copy all fields in anonymizeDeviceSlice
- Set 0600 permissions on private key file
…pboard

- Use GetFingerprint() for self-discovery comparison (works in HTTP mode)
- Relax ReadTimeout to 0 for large upload bodies
- Add safe fingerprint truncation helper for display
- Prefer wl-copy/wl-paste only when WAYLAND_DISPLAY is set
- Add defer svc.Stop() in DiscoverDevices to prevent socket leak
- Reset closed flag on multicast StartListening for restart support
- Bump go.mod to 1.26.3 to align with CI/Docker pins
@bethropolis bethropolis changed the title v0.6.2 — security, discovery, UX, progress ETA v0.6.2: security, discovery, UX, progress ETA Jul 13, 2026
@bethropolis
bethropolis merged commit 0b75679 into main Jul 13, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant