AnInsomniacy/motrix-next v3.8.6-beta.4

v3.8.6-beta.4 — Security Hardening & Deep Link Reliability

on GitHub

What's Changed

This beta focuses on tightening the desktop security boundary, improving deep-link resilience, and making filename and metadata parsing more robust across real-world download inputs.

🛠 Improvements

• Hardened Tauri security defaults with an explicit CSP and narrower capability scopes.
• Restricted bundled aria2 RPC defaults to loopback-only access.
• Sanitized HTTP header values across add-task, task-detail, cURL, and filename-resolution flows.
• Improved filename resolution for RFC 2047 encoded Content-Disposition headers.
• Refactored parsing utilities for proxy, torrent metadata, and deep-link handling.
• Preserved original task birth timestamps when Rust-side monitoring records completed history entries.

🐛 Bug Fixes

• Redacted extensionApiSecret from diagnostic exports.
• Prevented malformed thunder:// links from aborting an entire deep-link batch.
• Fixed TypeScript path resolution by correcting tsconfig.json module path entries.