-
MyFSIO v0.2.8 Beta Pre-Release
released this
2026-02-10 14:19:15 +00:00 | 96 commits to main since this releaseSecurity
- Fixed XSS vulnerability via inline HTML/SVG preview
- Fixed Content-Disposition header injection vulnerability
- Fixed cross-bucket upload registry bypass
- Fixed move partial failure handling vulnerabilities
Changed
- Migrated UI backend from direct storage calls to S3 API proxy via boto3
- Refactored ~42 UI routes to proxy through S3 API using boto3 with SigV4 signing
- Added S3ProxyClient, response translators, NDJSON streaming, and upload registry
- Added input validation (key length, null bytes, part numbers)
- Added PermissionError handling and connection error catches
- Implemented per-object bulk delete authorization and tag limit enforcement
- Updated UI integration tests to use live API server pattern
Fixed
- Bucket dashboard search textbox functionality
Performance
- Cache ETag on GET requests
- Fixed gzip buffering issues
- Batch metadata into directory indexes
Downloads