spalencsar/bearwave
1
0
Fork 0
mirror of https://github.com/spalencsar/bearwave.git synced 2026-07-06 14:24:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

release: 1.0.4 security hardening and stability fixes

Browse Source 
Validate manual stream URLs (http/https only), restrict notification
cover downloads to HTTPS, and add transfer timeouts for metadata and
cover fetches. Document playback, tray, MPRIS, and QML refactor changes
in CHANGELOG and AppStream metadata.
This commit is contained in:
Sebastian Palencsar
2026-06-20 14:31:13 +02:00
parent cbd82e5ab1
commit 74cabebc4b
9 changed files with 91 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
de.nerdbear.bearwave.metainfo.xml
View File

@@ -59,6 +59,16 @@
</provides>
<releases>
<release version="1.0.4" date="2026-06-20">
<description>
<ul>
<li>Security: validate manual stream URLs (http/https only) and HTTPS-only cover downloads</li>
<li>Security: add network transfer timeouts for metadata and cover fetches</li>
<li>Fixed playback navigation, API race conditions, Wayland tray, and MPRIS metadata</li>
<li>Refactored QML UI into modular components</li>
</ul>
</description>
</release>
<release version="1.0.3" date="2026-05-30">
<description>
<ul>