Sandstorm v0.275 Release Notes

Release Date: 2020-11-22 // over 3 years ago
    • 🔒 When an app uses static publishing, symlinks placed in the publish directory are no longer allowed to point outside that directory. This could hypothetically have been a security issue if an app allowed a non-trusted user to instruct it to publish symlinks, but we're not aware of any current apps that do this. Only the app's own data was at risk, not the system. (Thanks @zenhack.)
    • ✂ Removed implementation of httpGet() method of HackSessionContext. This has been disabled for some time, with the ability to re-enable it through a hidden setting, but no one has asked us for the hidden setting, so we believe this feature is no longer in use. Apps must now use powerbox requests to get permission to make HTTP requests. (Thanks @zenhack.)
    • ⚡️ Updated Dutch translation. (Thanks @m-burg.)