Sandstorm v0.275 Release Notes
Release Date: 2020-11-22 // over 3 years ago-
- 🔒 When an app uses static publishing, symlinks placed in the publish directory are no longer allowed to point outside that directory. This could hypothetically have been a security issue if an app allowed a non-trusted user to instruct it to publish symlinks, but we're not aware of any current apps that do this. Only the app's own data was at risk, not the system. (Thanks @zenhack.)
- ✂ Removed implementation of
httpGet()
method ofHackSessionContext
. This has been disabled for some time, with the ability to re-enable it through a hidden setting, but no one has asked us for the hidden setting, so we believe this feature is no longer in use. Apps must now use powerbox requests to get permission to make HTTP requests. (Thanks @zenhack.) - ⚡️ Updated Dutch translation. (Thanks @m-burg.)