- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
no vulnerabilities since 2023-07-23
- there is a discord server with an
@everyonein case of future important updates - v1.8.7 (2023-07-23) - CVE-2023-38501 - reflected XSS
- v1.8.2 (2023-07-14) - CVE-2023-37474 - path traversal (first CVE)
new features
- remember and restore scroll position when leaving the textfile viewer
bugfixes
- the request-smuggling detetcor was too strict, blocking access to textfiles with newlines / control-codes in the filename
- focus and text selection in messageboxes was still jank, mainly in firefox and especially phones
other changes
- the banhammer now applies on attempts at request-smuggling and path traversals
- these were merely detected and rejected before, might as well bonk them
- reject bad requests with a terse 500 instead of abruptly disconnecting in some cases
- stops firefox from rapidly spamming additional attempts
💾 what to download?
| download link | is it good? | description |
|---|---|---|
| copyparty-sfx.py | ✅ the best 👍 | runs anywhere! only needs python |
| a docker image | it's ok | good if you prefer docker 🐋 |
| copyparty.exe | ⚠️ acceptable | for win8 or later; built-in thumbnailer |
| u2c.exe | ⚠️ acceptable | CLI uploader as a win7+ exe (video) |
| copyparty32.exe | ⛔️ dangerous | for win7 -- never expose to the internet! |
| cpp-winpe64.exe | ⛔️ dangerous | runs on 64bit WinPE, otherwise useless |