VALT 6.6.10: Difference between revisions

From IVS Wiki
Jump to navigation Jump to search
Created page with "May 22nd, 2026 '''Application''' * Fixed issue that caused recording video files to infinitely grow in size ** This specifically impacted recordings put in the Prepared State..."
 
No edit summary
Line 8: Line 8:
'''Technical'''
'''Technical'''
* Security Updates
* Security Updates
** Enabled HTTP2
** Enabled HTTP2  
** Updated header response to no longer show Nginx and PHP versions
** Server version information no longer exposed in HTTP responses
** Added the following security headers
** Strengthened HTTP security response headers  
*** x-frame-options "sameorigin"
** Resolved an issue where certain paths did not enforce HTTPS security policies
*** x-permitted-cross-domain-policies: none
** API endpoints now return consistent JSON error responses  
*** x-xss-protection: 0
** Improved API redirect handling for more reliable client compatibility
** Fixed issue that that did not apply HSTS to /socket.io and /api paths
** Fixed duplicate header conflict on the phpMyAdmin path
** Updated /api paths to return JSON responses instead of HTML
** Updated /api/v3 redirect to /api/v3/ with 308 code instead of 302 code
** Updated /phpmyadmin path to strip duplicate upstream headers

Revision as of 19:16, 21 May 2026

May 22nd, 2026

Application

  • Fixed issue that caused recording video files to infinitely grow in size
    • This specifically impacted recordings put in the Prepared State and then started with an I/O trigger


Technical

  • Security Updates
    • Enabled HTTP2
    • Server version information no longer exposed in HTTP responses
    • Strengthened HTTP security response headers
    • Resolved an issue where certain paths did not enforce HTTPS security policies
    • API endpoints now return consistent JSON error responses
    • Improved API redirect handling for more reliable client compatibility
    • Fixed duplicate header conflict on the phpMyAdmin path