Static Web Server Files

This new v2.41.0 release includes important bug fixes, new features, and improvements. The custom headers, installer scripts and hidden file handling are now more reliable. Dynamic compression encodings have been enhanced with internal priority support based on modern compression algorithms. Default options now help protect hidden files and prevent risky symlink usage. The installer and Docker images have been improved and dependencies are updated for better stability. Also, the documentation features a new showcases page to highlight how SWS is being used in the wild.

Security Patch

This particular release patches a security vulnerability targeting the 'Basic Authentication' feature. More details about the fixed security issue will be provided in the next few hours.

We encourage users to update as soon as possible.

Fixes

• 88422ba Update project dependencies. (#620) by @joseluisq
• bc7b7cd Docker: Update Alpine (3.22.3) and Debian (13.3) Docker images. (#619,#625) by @joseluisq
• df5fb00 Custom headers are not applied when --redirect-trailing-slash is disabled. (#613) by @joseluisq
• 1a31f00 Hidden root paths (e.g. .public) are ignored by --ignore-hidden-files feature. (#606) by @mightyiam
• 9fbafcf Installer script fails when used in Alpine Linux. (#610) by @joseluisq
• c298a6d CI: Remove pull_request trigger from release-docker-devel workflow. (#608) by @joseluisq
• 7bf0fd4 Timing-based username enumeration issue in 'Basic Authentication' feature. By @naoyashiga

Features

• 735cc79 Add internal priority support for dynamic compression encodings based on modern compression algorithms. (#622) by @msuarezd. See docs.

Refactorings

• 08900b3 Separate static pre-compression from dynamic compression features. (#624) by @msuarezd
• 2839352 breaking: The --ignore-hidden-files and --disable-symlinks options are now enabled by default. (#621) by @joseluisq
• d76106f Replace unmaintained rustls-pemfile dependency in tls module. (#616) by @joseluisq
• 865e8e4 Improve SWS installer script functionality for Linux/BSDs. (#611) by @joseluisq
• be04262 Docker: Prefer gnueabihf binary for Debian linux/arm/v7 Docker image. (#609) by @joseluisq

Docs

• beacdbc Initial SWS 'showcases' page to highlight how SWS is being used. (#605) by @joseluisq. See docs.

For more details see the v2.41.0 milestone and the full changelog v2.40.1...v2.41.0.