From 700111ffeb269119158d6128dcebe6407f6ffba6 Mon Sep 17 00:00:00 2001 From: ed Date: Thu, 31 Aug 2023 22:11:31 +0000 Subject: [PATCH] v1.9.3 --- copyparty/__version__.py | 4 ++-- docs/changelog.md | 33 +++++++++++++++++++++++++++++++++ scripts/pyinstaller/deps.sha512 | 6 +++--- 3 files changed, 38 insertions(+), 5 deletions(-) diff --git a/copyparty/__version__.py b/copyparty/__version__.py index c14f9b50..e00ccfa0 100644 --- a/copyparty/__version__.py +++ b/copyparty/__version__.py @@ -1,8 +1,8 @@ # coding: utf-8 -VERSION = (1, 9, 2) +VERSION = (1, 9, 3) CODENAME = "prometheable" -BUILD_DT = (2023, 8, 26) +BUILD_DT = (2023, 8, 31) S_VERSION = ".".join(map(str, VERSION)) S_BUILD_DT = "{0:04d}-{1:02d}-{2:02d}".format(*BUILD_DT) diff --git a/docs/changelog.md b/docs/changelog.md index 446c72e8..9469c28f 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -1,3 +1,36 @@ +▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ +# 2023-0826-2116 `v1.9.2` bigger hammer + +## new features +* more ways to automatically ban users! three new sensors, all default-enabled, giving a 1 day ban after 9 hits in 2 minutes: + * `--ban-403`: trying to access volumes that dont exist or require authentication + * `--ban-422`: invalid POST messages (from brutefocing POST parameters and such) + * `--ban-url`: URLs which 404 and also match `--sus-urls` (scanners/crawlers) + * if you want to run a vulnerability scan on copyparty, please just [download the server](https://github.com/9001/copyparty/releases/latest/download/copyparty-sfx.py) and do it locally! takes less than 30 seconds to set up, you get lower latency, and you won't be filling up the logfiles on the demo server with junk, thank you 🙏 +* more ban-related stuff, + * new global option `--nonsus-urls` specifies regex of URLs which are OK to 404 and shouldn't ban people + * `--turbo` now accepts the value `-1` which makes it impossible for clients to enable it, making `--ban-404` safe to use +* range-selecting files in the list-view by shift-pgup/pgdn +* volumes which are currently unavailable (dead nfs share, external HDD which is off, ...) are marked with a ❌ in the directory tree sidebar +* the toggle-button to see dotfiles is now persisted as a cookie so it also applies on the initial page load +* more effort is made to prevent `