v1.20.4

9001/copypartyv1.20.4Jan 23, 2026by 9001

AI Summary

Addresses a critical HTTP desync vulnerability fix for reverse proxies by forcing connection closures, alongside UI fixes for file/folder creation.

Key Highlights

Fix for HTTP desync vulnerability in reverse proxies using `connection:close`.
UI fix for right-click menu in gridview when creating new files/folders.
Configuration updates for Esperanto translation and external domain sharing.

New Features

HTTP desync fix for proxied clients
Right-click menu fixes
Esperanto translation update
External domain share links display

Full Release Notes

<img src="https://github.com/9001/copyparty/raw/hovudstraum/docs/logo.svg" width="250" align="right"/>

* read-only demo server at https://a.ocv.me/pub/demo/
* [docker image](https://github.com/9001/copyparty/tree/hovudstraum/scripts/docker) ╱ [similar software](https://github.com/9001/copyparty/blob/hovudstraum/docs/versus.md) ╱ [client testbed](https://cd.ocv.me/b/)

there is a [discord server](https://discord.gg/25J8CdTT6G) with an `@everyone` in case of future important updates, such as [vulnerabilities](https://github.com/9001/copyparty/security) (most recently 2025-09-07)

## 🩹 bugfixes

* #1235 rightclick-menu: fix creating new files/folders in gridview (thx @SpaceXCheeseWheel!) ffca67f2
* #1231 fix http desync if the [`urlform`](https://copyparty.eu/cli/#urlform-help-page) global-option was changed to `get`
  * this initial fix only applies when reverse-proxied, in which case copyparty will now always `connection:close` (don't reuse tcp/uds connections), as giving each client a fresh socket helps avoid all such issues e1eff216 b4fddbc3
  * the expected performance impact from this change is near-zero for real use, even if benchmarks show a 40% reduction in requests/sec in the absolute-worst-case (burst of cheap requests)
  * a future version will also fix this issue for non-proxied clients

## 🔧 other changes

* #1229 updated the Esperanto translation (thx @slashdevslashurandom!) 1142ac25
* #1232 shares: if an external domain is configured, then show both the LAN and external link for each share 81e5eb7b

----

## ⚠️ not the [latest version](https://github.com/9001/copyparty/releases/latest/)!