Difference between revisions of "VALT 6.6.10"

From IVS Wiki
Jump to: navigation, search
(Created page with "May 22nd, 2026 '''Application''' * Fixed issue that caused recording video files to infinitely grow in size ** This specifically impacted recordings put in the Prepared State...")
 
Line 8: Line 8:
 
'''Technical'''
 
'''Technical'''
 
* Security Updates
 
* Security Updates
** Enabled HTTP2
+
** Enabled HTTP2  
** Updated header response to no longer show Nginx and PHP versions
+
** Server version information no longer exposed in HTTP responses
** Added the following security headers
+
** Strengthened HTTP security response headers  
*** x-frame-options "sameorigin"
+
** Resolved an issue where certain paths did not enforce HTTPS security policies
*** x-permitted-cross-domain-policies: none
+
** API endpoints now return consistent JSON error responses  
*** x-xss-protection: 0
+
** Improved API redirect handling for more reliable client compatibility
** Fixed issue that that did not apply HSTS to /socket.io and /api paths
+
** Fixed duplicate header conflict on the phpMyAdmin path
** Updated /api paths to return JSON responses instead of HTML
 
** Updated /api/v3 redirect to /api/v3/ with 308 code instead of 302 code
 
** Updated /phpmyadmin path to strip duplicate upstream headers
 

Revision as of 14:16, 21 May 2026

May 22nd, 2026

Application

  • Fixed issue that caused recording video files to infinitely grow in size
    • This specifically impacted recordings put in the Prepared State and then started with an I/O trigger


Technical

  • Security Updates
    • Enabled HTTP2
    • Server version information no longer exposed in HTTP responses
    • Strengthened HTTP security response headers
    • Resolved an issue where certain paths did not enforce HTTPS security policies
    • API endpoints now return consistent JSON error responses
    • Improved API redirect handling for more reliable client compatibility
    • Fixed duplicate header conflict on the phpMyAdmin path