What's Changed
Fixed
- Firefox: small-file downloads no longer fail. In some cases, downloading a small file in Firefox would error with a 404. This is fixed. (#52)
- Security hardening: the relay server can no longer be used to probe private networks. Someone with temporary credentials could previously relay connections into the server's internal network (SSRF). Relay targets in private IP ranges (LAN, CGNAT, IPv6 local) are now blocked. (#53)
- Better error when the credential rate limit is hit — the API now answers 429 ("slow down") instead of 503 ("server broken"). (#53)
Full Changelog: v.4.2.0...v.4.3.0