v4.7.0 to v4.8.0 · Crafty Controller / Crafty 4 · GitLab

Commits on Source 152

b7911ef2 Remove front-end references for local file import
Dec 15, 2025
717fd553 Remove main_controller import references
Dec 17, 2025
8749fa7c Merge branch 'dev' into security/local-file-import
Dec 17, 2025
bcfa24e5 Merge branch 'refactor/server-files' into security/local-file-import
Dec 18, 2025
0050b6de Update front end translation
Dec 19, 2025
2f491abc Merge branch 'security/local-file-import' of...
Dec 19, 2025
3bd4de5b Fix root dir selection
Dec 19, 2025
a69a608e Use pathlib for upload dir
Dec 19, 2025
800e41da Allow deletion of directories from upload import dir
Dec 19, 2025
da4ee41a Fix unzip server call to unzip to target dir
Dec 19, 2025
6f76a9c4 Use relative paths on front end
Dec 19, 2025
854b6ef3 Refactor API handler to remove zip imports
Dec 19, 2025
e40cbdce Relabel for root dir selection
Dec 19, 2025
785c196a Update import methods to only import from import dir
Dec 19, 2025
bad94e9b Move unpacked items to save space
Dec 19, 2025
bb0b7535 Move zip status to base
Dec 20, 2025
30a2c57b Merge branch 'dev' into security/local-file-import
Dec 20, 2025
10c82900 Fix crash on startup due to big bucket cache refresh
Dec 27, 2025
686fd139 Merge branch 'dev' into bugfix/refresh-cache-timeout
Dec 27, 2025
78131f44 Prepare 4.7.1 release base
Dec 27, 2025
ed31b203 Translated (Turkish)
Dec 28, 2025
88cf3917 Merge remote-tracking branch 'origin/dev' into dev
Dec 28, 2025
dac9b0fd Allow config.json option for mimetypes
Dec 27, 2025
cd01b7fb Translated (Chinese (Simplified Han script))
Dec 28, 2025
d1605a09 Make mimetypes configurable
Dec 28, 2025
14a6dfad Add accepted mimetypes as config.json option
Dec 28, 2025
53298d99 Work on config.json front end
Dec 28, 2025
aabaea5b Add translations
Dec 28, 2025
3b68068c Translated (Chinese (Simplified Han script))
Dec 29, 2025
2715642f Remove HTML encoding on files return
Dec 29, 2025
46744192 Check if we can decode file with UTF-8 to determine opening instead of mime
Dec 29, 2025
3886ae54 Fix unsupported file warnings
Dec 29, 2025
3e521d59 Remove config.json properties for mime
Dec 29, 2025
e3ca1aba Allow alt + click override for files that cannot be opened
Dec 29, 2025
3224afb6 Update translation
Dec 29, 2025
20a0e9dd Remove unused import
Dec 29, 2025
587aa428 Remove unused js in config_json
Dec 29, 2025
c74054b2 Remove unused mimetype logic
Dec 29, 2025
78372048 Remove unused config_json elements
Dec 29, 2025
6d223469 Check for binary files. Add docstring
Dec 29, 2025
62642b2a Allow middle mouse new tab and ctrl + click new tab
Dec 29, 2025
82940ff8 Translated (Russian)
Dec 30, 2025
6f6ceacc Remove old references to local imports
Dec 31, 2025
2494e80d Refactor send_start_error to send_error
Dec 31, 2025
13b4adb5 wip for different workstation
Dec 31, 2025
8c34dcb2 List zip directory structure without unzipping.
Jan 01, 2026
1a5c565e Fix directory show/hide
Jan 01, 2026
0bc32057 Fix child stacking when clicking folder icon
Jan 01, 2026
ac083dcd Check for traversal
Jan 01, 2026
7cb0335c Add root button click to centralized js. Setup new API calls
Jan 02, 2026
6b36115e Working java imports
Jan 02, 2026
eddd115f Fix bedrock front end to show modal
Jan 02, 2026
36a14b26 Working bedrock imports
Jan 02, 2026
ab53b4dc Add traversal checking to root path check
Jan 02, 2026
8e6257f5 Merge branch 'dev' into security/local-file-import
Jan 03, 2026
04a6c3b5 Fix duplicate ID
Jan 03, 2026
1f99f940 Remove useless variable
Jan 03, 2026
6d77cc57 Set constants
Jan 03, 2026
26e977ee Fix sonar. Add docstrings
Jan 03, 2026
14feb688 Raise key error for unimplemented custom server
Jan 03, 2026
05ab5c93 Apply executable permissions for bedrock servers
Jan 03, 2026
c8947aed Fix client size changed during iteration
Jan 03, 2026
b9d26921 Fix comment
Jan 06, 2026
5fa24226 Remove unused variable
Jan 06, 2026
a23c92cb Remove unzip server method - unused
Jan 06, 2026
c52653e6 Handle error if someone renames a .tar file
Jan 06, 2026
36cc7c7d Translated (Ukrainian)
Jan 06, 2026
3261cb3d Fix wait message
Jan 06, 2026
c2908f52 Fix python 3.10 compatability
Jan 06, 2026
64e3b0a7 Fix return type
Jan 06, 2026
035bbd8e Additional traversal checking for user input at path
Jan 06, 2026
c202f6cc Add traversal tests at request of Pretzel
Jan 06, 2026
8e7c8c35 Add variable for zip_path
Jan 07, 2026
394e9d4d Add check for traversal validation in "at" on zipfile scan
Jan 07, 2026
1c66b41e Check root dir call in api handler
Jan 07, 2026
a0dd9f98 Add validate_traversal calls to ServerFilesOperationHandler
Jan 09, 2026
208ed186 Switch all TRAVERSAL_DETECTED errors to 403 response code
Jan 09, 2026
f8e6f72c Add py_webauthn dependency
Jan 14, 2026
1872ec4b Add passkey database model and migration
Jan 14, 2026
860a79a5 Add migration for disable_password_auth user field
Jan 14, 2026
a1308c9b Add passkey translations
Jan 14, 2026
567217fb Add passkey configuration settings
Jan 14, 2026
9ea40748 Add passkey controller
Jan 14, 2026
bf8107bd Add passkey login API endpoints
Jan 14, 2026
0293b91a Add user passkey management API endpoints
Jan 14, 2026
a56ed722 Add passkey management page to user settings
Jan 14, 2026
6fcd05a2 Add passkey login button to login page
Jan 14, 2026
4953ff44 Add passkey challenge cleanup task
Jan 14, 2026
3cf6da7b Add disable_password_auth option to user model
Jan 14, 2026
3888168d Add UI toggle and update MFA banner for password auth setting
Jan 14, 2026
b0368ac7 Remove duplicate totp_helper initialization
Jan 14, 2026
7a6371b4 Change default base_url to localhost for passkey compatibility
Jan 14, 2026
21a3b037 Explicitly allow 'localhost' base_url
Jan 14, 2026
d29e1a78 Use Rozza's fixes to secure root_dir.js from XSS
Jan 14, 2026
e37804d7 Merge branch 'dev' into bugfix/refresh-cache-timeout
Jan 14, 2026
6528be4f Update changelog !941
Jan 14, 2026
9b328ccb Merge branch 'bugfix/refresh-cache-timeout' into 'dev'
Jan 14, 2026
38ba47ef Merge branch 'dev' into tweak/accepted-file-types
Jan 14, 2026
67518a02 Update changelog !944
Jan 14, 2026
a357bcfc Merge branch 'tweak/accepted-file-types' into 'dev'
Jan 14, 2026

52 additional commits have been omitted to prevent performance issues.