SECURITY
- Prevent ReDOS from
useragentpackage by removing deprecated Do Not Track feature. Thanks to Patrick Bohn Matthiesen and Leonora from IT University of Copenhagen for reporting this vulnerability!
Bug fixes
- Correctly display bulk actions button in "My videos"
- Keep playlist name original casing in "My videos"
- Fix PIP button z-index on Firefox
- More robust S3 upload and ACL error handler
- Fix broken video state on S3 move failure
- Reset filters when loading query params in "Browse videos"
- Fix upload tab title when the file is uploaded
- Fix follow card overflow in about page
- Convert to full UUID request param
idinfilter:html.embed.video.allowed.resultandfilter:html.embed.video-playlist.allowed.resultplugin hooks - Fix HLS playback issue on Chrome 138
- Fix selecting frame on Safari
- Fix input search with multiple prefix tokens
- Fix channel sync duplicate after video deletion
- Fix caption raw edition when editing segment
- Fix accessibility issues:
- Fix embed title/avatar accessibility
- Add player P2P up/down info aria label
- Support escape key in the player settings menu
- Support arrow left/right navigation in the settings menu
- Fix entry focus when navigating in the settings menu
- Add aria controls attribute to settings button
- Thanks to Woebin from Access Lab and HowlRound Theatre Commons for conducting the player accessibility audit!