What's Changed
Security:
- [Moderate] public metadata api returns file content to anonymous share visitors, ignoring the share's download limit and file-viewer setting (GHSA-55mw-cwg7-m8f5) -- thanks @kta1kri
New Features:
- Users can set default view mode and thumbnail size from Profile settings (Listing options). Admins can set the same defaults for existing users from the user edit prompt. Values persist to the account and apply on new browsers or devices; they do not override view preferences already saved locally (#2884).
- Admins can edit all profile preference defaults for existing users from the user management panel (listing, preview, sidebar, theme, and related options), matching what was previously available only for new users and global user defaults.
Bugfixes:
- Fixed infinite loading spinner on
/and/loginafter CSP security hardening (#2886, #2890) - fixed darkmode styling bug where background wouldn't respect configured settings when not logged in
- fixed styling bug where padding was missing from right side of listing view.
- tilde paths for sources were not properly expanded. (eg "~" for home)
- fixed tooltip not showing up for some circumstances on mobile, improved consistency.
- a few styling fixes for inconsistencies (#2908)
All Changes
- Beta/v2.0.3 by @gtsteffaniak in #2870
- fix(contributing): typo from improtant to important by @ingStudiosOfficial in #2873
- fix onlyoffice csp security regression (#2876) by @gtsteffaniak in #2900
- Fix styling bugs by @gtsteffaniak in #2901
- Fix more styles by @Kurami32 in #2908
- Small bugfixes v2.0.5 by @gtsteffaniak in #2912
- Fix loading spinner v2.0.5 by @gtsteffaniak in #2914
- updated with all user default changes for admins by @gtsteffaniak in #2915
New Contributors
- @ingStudiosOfficial made their first contribution in #2873
Full Changelog: v2.0.2-beta...v2.0.5-beta