Changes 10/15/2026 (v3.36.0)
release(v3.36.0): enforce the WebDAV storage boundary
Fixed
- WebDAV COPY and MOVE destinations now reject encoded path traversal and any resolved path outside the configured uploads root.
Upgrade notes
- No account, file, folder, permission, encryption-key, or configuration migration is required.
- Ordinary WebDAV clients and reverse-proxy subpath deployments require no changes.
v3.36.0
Full Changelog
SHA-256 (zip)
99919d444017008e7d0d1437441bf54a22748b08a8360496010fe4db4f37d955 FileRise-v3.36.0.zip