Important
This is a security release. Please upgrade immediately.
Added
Configure a socket path under [server]:
[server]
socket = "/run/rustypaste/rustypaste.sock"The server listens on the Unix socket as well as the configured TCP address.
Changed
- Retry random URL generation when a generated name already exists by @spignelon in #633
Set random_url.retry_count to control how many attempts are made.
It defaults to 5, helping uploads succeed when a generated name collides with an existing file.
[paste]
random_url = { type = "petname", words = 2, separator = "-", retry_count = 5 }Fixed
- Treat glob metacharacters in requested file names literally by @vindex
- Prevent uploads from writing outside the upload directory reported by @JCorners68
- Reject encoded path separators when serving files reported by @lml20000827
- Support URL-encoded filenames by @tessus in #634
- Create files atomically to prevent concurrent uploads from overwriting one another by @spignelon in #633
New Contributors
- @GideonBear made their first contribution in #667
- @spignelon made their first contribution in #633