The Real Grunfink

Hi. Specifically, the first mentioned fix:

Fixed a bug in the notification page that made snac hang forever while trying to read abnormally big files.

Some users had detected very big files (caused by probably intentionally malicious posts) in the notification area that made it unaccesible. The fix consists in a) taking care that those humungous files are no longer created, and b) if they already exist, they are ignored.

Thanks for the FreeBSD port!

I've just published version 2.95 of #snac, the simple, minimalistic #ActivityPub instance server written in C. This is an important release, as it fixes an issue that can lead to denial of service attacks, so please update as soon as possible. It also includes the following changes:

Fixed a bug in the notification page that made snac hang forever while trying to read abnormally big files.

Improved support for text-only web browsers: it's now possible to configure a set of web browser user-agent strings that will receive simpler HTML in the private timeline web UI. Basically, it consists in avoiding details / summary HTML tags as much as possible.

Added some fixes to media proxy code.

Fixed EmojiReact code to allow any emoticon defined in emojis.json, not only those with colon-wrapped identifiers.

Fixed a bug in notification filtering (paging was sometimes incorrect).

Added a notification filter for Webmentions.

Mastodon API: Don't return reactions count as string (contributed by mkljczk), implemented GET /v1/media (contributed by clairemont).

Fixed bug in documentation examples (contributed by Sprite_tm).

Updated Ukrainian and Russian translations (contributed by wincentbalin and koru).

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse