Skip to content

Releases: c0m4r/up

up 2.1.3

24 Dec 11:39
19e454c
Compare
Choose a tag to compare

Added

  • added github meta tags
  • added security policy

Security

  • added js escaping html chars from file name and size

up 2.1.2

23 Dec 16:32
a43e0c6
Compare
Choose a tag to compare

Added

  • favicon added
  • added missing input label

up 2.1.1

23 Dec 14:23
241b62a
Compare
Choose a tag to compare

Changed

  • increased files_limit config option
  • removed outstanding inline js
  • reworked readme
  • updated composer.json with required php modules

up 2.1.0

22 Dec 23:54
Compare
Choose a tag to compare

Added

  • Subresource Integrity (SRI) implementation

Changed

  • improved nginx config regex
  • inline js moved to js/up.js

Removed

  • random input id/name
  • input_filename from config.php and other places

up 2.0.2

22 Dec 16:30
1f5d8aa
Compare
Choose a tag to compare

Security

  • New config option: "allowed_hosts" comma-separated list of allowed HTTP_HOST
  • Added HTTP headers validation for URL generation

up 2.0.1

22 Dec 14:51
735891f
Compare
Choose a tag to compare

Added

  • Composer presence validation
  • Meta tags: viewpoint and description
  • Added filtered HTTP_X_FORWARDED_FOR to be logged if behind reverse proxy

Changed

  • Moved any inline CSS to the styles.css file

Security

  • Removed vulnerable method of mime type checking
  • Added two step mime type validation using finfo and exif_imagetype

up 2.0.0

21 Dec 16:10
171ea9f
Compare
Choose a tag to compare

Added

  • Docker IPv6 configuration
  • Imagecraft dependency

Changed

  • GDEnhancer has been replaced with Imagecraft
  • New log format: [Y-m-d H:i:s] ip url size

Fixed

  • Animated GIF support
  • HTTP_ACCEPT_LANGUAGE validation

Removed

  • GDEnhancer dependency

up 1.2.0

20 Dec 19:13
fa0789f
Compare
Choose a tag to compare

Added

  • Docker configuration

Fixed

  • Image URL generation method

up 1.1.0

20 Dec 12:24
3b10a30
Compare
Choose a tag to compare

Added

  • WebP support
  • config file
  • write permission validation