Changelog v1.8.4
This release focuses on hardening the application security and fixing potential vulnerabilities.Security Hardening
Critical Fixes
- Backend Safety: Fixed Undefined Behavior (UB) in audio stream shutdown logic. Replaced unsafe
std::mem::zeroed()usage with safetry_clone()mechanism.
Security Improvements
- Content Security Policy: Implemented strict CSP header preventing execution of unauthorized scripts and styles.
- API Restriction: Disabled
withGlobalTaurito prevent global exposure of Tauri APIs to the frontend. - XSS Mitigation: Refactored frontend logging and notifications to use safe DOM manipulation instead of
innerHTML, preventing XSS attacks via crafted log messages.
This release includes important security fixes. Upgrading is recommended for all deployments.
Other Changes
- Bumped dependencies for security audits.