v0.8.6
spider-rs/spiderv0.8.6Sep 3, 2026by svilenmarkov
Upgrading?
AI Summary
This release addresses critical security vulnerabilities and widget stability issues in the spider monitoring dashboard, including a rate-limit bypass exploit and various UI glitches.
Key Highlights
- Fixes Reddit widget challenge page handling and RSS feed thumbnails
- Resolves Docker container identification and Pi-hole password requirement issues
- Patches X-Forwarded-For spoofing vulnerability allowing rate-limit bypass
- Adds authentication helpers for custom APIs (allow insecure, basic auth)
New Features
- Added `withAllowInsecure` function to `custom-api`
- Added `withBasicAuth` function to `custom-api`
Full Release Notes
## Fixed - Reddit widget not fetching new posts due to challenge page changes - Unhealthy docker containers not getting identified correctly - selfhst icons showing outdated icons - X-Forwarded-For spoofing which would allow rate-limit bypass for auth - Misleading currency symbols for some markets in the markets widget - Incorrect handling of https sock-path in the `docker-containers` widget - Incorrect sorting for `reddit`, `hacker-news` and `lobsters` widgets with `sort-by: engagement` - Search bang indicator not getting cleared correctly after pressing `enter` - Not being able to use the `dns-stats` widget on a Pi-hole instance without a password - Not being able to use `webp` extension for icons - RSS feeds not showing correct thumbnails when image URL is a relative path - Incorrect `manifest.json` path when using `base-url` ## Changes - Videos widget will now cache and reuse video lists if an update fails for a channel - Added `withAllowInsecure` function to `custom-api` - Added `withBasicAuth` function to `custom-api`
Related Repositories
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
Build smaller, faster, and more secure desktop and mobile applications with a web frontend.
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one