Download Latest Version v6.4.0 -- Now it reads right to left source code.zip (31.5 MB)
Email in envelope

Get an email when there's a new version of SecureBit.chat - P2P Encrypted Messenger

Home / v4.8.6
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-05-18 1.3 kB
0
SecureBit.chat v4.8.6 -- Security Hardening Patch source code.tar.gz 2026-05-18 22.6 MB
0
SecureBit.chat v4.8.6 -- Security Hardening Patch source code.zip 2026-05-18 22.7 MB
0
Totals: 3 Items   45.2 MB 0

This patch release strengthens SecureBit.chat across verification, sanitization, privacy, transport abuse resistance, cache safety, and repository hygiene.

Security hardening

  • Bound SAS verification to the actual DTLS fingerprint strings of both peers.
  • Replaced regex-based chat sanitization with DOMPurify-backed sanitization.
  • Made WebRTC privacy mode explicit and kept relay-only state synchronized at runtime.
  • Removed production exposure of internal debug/control hooks.
  • Added receiver-side rate limiting for inbound chat messages.
  • Added receiver-side throttling for inbound file chunks.

Runtime and privacy safety

  • Hardened service-worker caching so only explicitly allowlisted safe assets are cached.
  • Removed an untracked disconnect timer so teardown no longer leaves delayed callbacks behind.
  • Preserved relay-only TURN behavior while making privacy implications clearer when relay-only mode is disabled or TURN is unavailable.

Repository hygiene

  • Stopped tracking node_modules in Git so platform-specific dependency binaries no longer pollute the repository or break cross-platform builds.

Validation

  • Full regression suite passes.
  • Clean install succeeds with npm ci.
  • Production build succeeds with npm run build.
Source: README.md, updated 2026-05-18