Starstruk Logo MarkStarstruk

v0.6.6-beta

gtsteffaniak/filebrowserv0.6.6-betaApr 4, 2025by gtsteffaniak

AI Summary

This release introduces important security and functionality improvements including a limit on archive size to prevent server burden, and shifts archive creation from memory to disk using a configurable temp directory. The update also includes several bug fixes related to file downloads, shares, and proxy user creation.

Key Highlights

  • Archive creation now uses disk-based temp storage instead of memory (configurable via server.cacheDir)
  • Added server.maxArchiveSize to limit tar/zip creation and prevent server overload
  • Temp directory requirement - users need permissions to create a tmp directory
  • Fixed externalUrl prefix issue for shares (#465)
  • Fixed file opening vs downloading behavior (#480)

Breaking Changes

  • Archive creation now requires a temp directory on disk - users in atypical environments must ensure proper tmp directory permissions

New Features

  • New server.maxArchiveSize configuration to limit archive size creation
  • Disk-based archive creation with configurable cache directory (server.cacheDir)
  • Automatic leading slash enforcement for scope paths
  • More verbose logging for share errors
  • disableUsedPercentage now also hides text and source bar

Full Release Notes

## What's Changed

> [!WARNING]
> A temp directory is now required for archive creation. By default, a `tmp` dir is created -- can be adjusted with `server.cacheDir`. If you are using an atypical user or running in an atypical environment, make sure the user that executes binary has access to create a `tmp` directory -- or mount/create a temp directory beforehand with the correct permissions.

 **New Feature**:
 - limit tar size creation to limit server burden. For example, don't let customers try to download the entire filesystem as a zip. see `server.maxArchiveSize` on config wiki.

 **Notes**:
 - disableUsedPercentage also hides text and source bar.
 - share errors show up in logs in more verbose way.
 - archive creation occurs on disk rather than in memory, use `server.cacheDir` to determine where temp files are stored.
 - automatically ensures leading slash for scope
   - https://github.com/gtsteffaniak/filebrowser/issues/472
   - https://github.com/gtsteffaniak/filebrowser/issues/476

 **BugFixes**:
 - fix proxy user creation issue https://github.com/gtsteffaniak/filebrowser/issues/478
 - externalUrl prefix issue fixed for shares. https://github.com/gtsteffaniak/filebrowser/issues/465
 - fix File Opens Instead of Just Downloading https://github.com/gtsteffaniak/filebrowser/issues/480
 - fix Download file name https://github.com/gtsteffaniak/filebrowser/issues/481**Full Changelog**: 

https://github.com/gtsteffaniak/filebrowser/compare/v0.6.5-beta...v0.6.6-beta