Files
StreamHall/public/vendor
Stardream 2b0aaf3a5d
Build and Push Docker Image / build (push) Successful in 12s
fix: security hardening and code review improvements
- hls proxy now signs full URL instead of hostname only (SSRF)
- viewer token required to start session (prevents stats forgery and password bypass)
- weak SECRET_KEY placeholder replaced with REPLACE_ME, startup warning added
- api key auth drops query-string fallback, Bearer header only
- hls variant playlist DRM detection fetches first variant
- dash manifest DRM detection added
- android webview detection restricted to Telegram only
- privacy comment removed from ip hash (ip is stored in plaintext)
- csv export adds range filter (today/7d/30d/all), defaults to 30d
- analytics export button integrated as dropdown with range selection
- docker-compose placeholder defaults updated
- readme and readme.zh-cn updated for v1.2.0 changes
2026-05-24 01:40:03 +10:00
..
2026-05-20 15:25:51 +10:00
2026-05-20 15:25:51 +10:00
2026-05-20 15:25:51 +10:00
2026-05-20 15:25:51 +10:00