Security alert
The fix introduced on v1.6.0 (https://github.com/dutchcoders/transfer.sh/pull/564) still had a bug allowing any IP to bypass basic http auth in case an IP whitelist was set, regardless the IP was matching the IP or not. This release include the fix for the bug.
What's Changed
- server/server.go: use TLS config provided by acme/autocert by @stefanbenten in https://github.com/dutchcoders/transfer.sh/pull/567
- Bump golang.org/x/net from 0.8.0 to 0.17.0 by @dependabot in https://github.com/dutchcoders/transfer.sh/pull/581
- deps: remove ioutil package by @ginglis13 in https://github.com/dutchcoders/transfer.sh/pull/583
- Bump google.golang.org/grpc from 1.53.0 to 1.56.3 by @dependabot in https://github.com/dutchcoders/transfer.sh/pull/586
- Fixes transfer() issues by @luizluca in https://github.com/dutchcoders/transfer.sh/pull/579
- Add new example by @AdamsGH in https://github.com/dutchcoders/transfer.sh/pull/574
New Contributors
- @ginglis13 made their first contribution in https://github.com/dutchcoders/transfer.sh/pull/583
- @luizluca made their first contribution in https://github.com/dutchcoders/transfer.sh/pull/579
- @AdamsGH made their first contribution in https://github.com/dutchcoders/transfer.sh/pull/574
Full Changelog: https://github.com/dutchcoders/transfer.sh/compare/v1.6.0...v1.6.1