What's new:
- Security fix: Sanitize the path parameter in History item widget to be plain text
- Security fix: Use microseconds in Receive mode directory creation to avoid potential DoS
- Security fix: Several hardening improvements for session and username management in Chat mode, to prevent impersonation and other issues
- Major feature: Obtain bridges from Moat / BridgeDB (over a domain-fronted Meek client)
- Major feature: Snowflake bridge support
- New feature: Tor connection settings, as well as general settings, are now Tabs rather than dialogs
- New feature: User can customize the Content-Security-Policy header in Website mode
- New feature: Built-in bridges are automatically updated from Tor's API when the user has chosen to use them
- Switch to using our
stem
fork calledcepa
, which is now published on PyPi so we can build it in releases - Various bug fixes