v0.35.2
passteque/gluetunv0.35.2Aug 31, 2026by github-actions[bot]
Upgrading?
AI Summary
Hardens dashboard origin validation and reverse-proxy access to defend against security threats like DNS rebinding and header smuggling.
Key Highlights
- Hardened dashboard origin validation and reverse-proxy access
- Defends against DNS rebinding and header smuggling
- Fixed root remote CDP WebSocket URLs with query strings
Full Release Notes
### Security - Hardened **dashboard origin validation and reverse-proxy access** with same-origin provenance enforcement that defends against DNS rebinding, form/header smuggling, and cross-origin requests. Reverse-proxied origins now require exact HTTPS allowlisting and generated token authentication, while tokenless IPv4 and IPv6 loopback access remains supported. Dashboard options are validated strictly, and CLI and MCP lifecycle behavior is aligned (#1738) ### Bug Fixes - Fixed **root remote CDP WebSocket URLs with query strings** to insert the required slash before the query while preserving the encoded query (#1735) ### Contributors - @ctate - @Railly
Related Repositories
ollama/ollama★ 184,207
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
fatedier/frp★ 110,051
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
infiniflow/ragflow★ 92,612
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
gohugoio/hugo★ 90,198
The world’s fastest framework for building websites.
junegunn/fzf★ 83,716
:cherry_blossom: A command-line fuzzy finder