rodber/chevereto-free 1.4.2

on GitHub

• Added tag-based release artifact builder #100
  • Builds $TAG.zip and $TAG-dev.zip artifacts
• Added hardened URL upload constrains #107
  • Restrict schemes to http, https and ftp
  • Restrict to allow only public IP addresses
• Added hardened .htaccess Apache HTTP Server restrictions #102
  • Restrict .php in public upload paths
  • Limits to only GET requests
• Added improved installation/update instructions
  • Manual and Composer-based alternatives
• Added extra checking for unwanted file extensions #101
  • Will now panic if a unwanted file get sneaked in the process
• Changed image (logo, colors) #106
  • Chevereto-Free finally use it's own logo
  • Chevereto-Free now looks less like "Chevereto"
• Changed self-update to use the new zip release artifact #109
  • Avoids .git et al and provides a smaller package
• Fixed bug with embed codes after upload #99

Full Changelog: 1.4.1...1.4.2