• v0.2.8 35f61313e0

    MyFSIO v0.2.8 Beta Pre-Release

    kqjy released this 2026-02-10 14:19:15 +00:00 | 96 commits to main since this release

    Security

    • Fixed XSS vulnerability via inline HTML/SVG preview
    • Fixed Content-Disposition header injection vulnerability
    • Fixed cross-bucket upload registry bypass
    • Fixed move partial failure handling vulnerabilities

    Changed

    • Migrated UI backend from direct storage calls to S3 API proxy via boto3
      • Refactored ~42 UI routes to proxy through S3 API using boto3 with SigV4 signing
      • Added S3ProxyClient, response translators, NDJSON streaming, and upload registry
      • Added input validation (key length, null bytes, part numbers)
      • Added PermissionError handling and connection error catches
      • Implemented per-object bulk delete authorization and tag limit enforcement
      • Updated UI integration tests to use live API server pattern

    Fixed

    • Bucket dashboard search textbox functionality

    Performance

    • Cache ETag on GET requests
    • Fixed gzip buffering issues
    • Batch metadata into directory indexes
    Downloads