What's Changed

fix: testing mode imagemagick errors by @fscorrupt in https://github.com/fscorrupt/posterizarr/pull/562

Full Changelog: https://github.com/fscorrupt/posterizarr/compare/2.2.42...2.2.43

2.2.42 Breaking risk 27d

Security fixes

dep: postcss v8.5.10 — fixes XSS vulnerability caused by improper escaping of ` sequences (Dependabot #561)

Notable features

SSRF protection for all connected services (Plex, Jellyfin, Emby, TMDB, TVDB, Webhooks)
Directory traversal prevention in asset upload/delete/browsing
Command sanitization for CLI arguments of background tasks

Full changelog

This release brings substantial under-the-hood security improvements to both the backend API and the frontend UI, along with safer logging practices.

Frontend XSS Patch (Dependabot #561): Updated postcss to v8.5.10 to resolve a vulnerability where </style> sequences were improperly escaped, preventing potential Cross-Site Scripting (XSS) attacks.
SSRF Protection: Strengthened internal and external API request handling to block Server-Side Request Forgery attempts across all connected services (Plex, Jellyfin, Emby, TMDB, TVDB, Webhooks).
Directory Traversal Prevention: Hardened asset uploading, deletion, and folder browsing to strictly restrict access to designated asset directories.
Command Sanitization: Improved validation of CLI arguments for background tasks (like ImageMagick processing) to prevent argument injection.
Log Redaction: Sensitive information such as API Keys, tokens, and PINs are now strictly masked in application logs and the downloadable support ZIP (Only Debug log was affected).
Safe Error Responses: Genericized HTTP server error responses to prevent internal path and stack trace leaks.

Sync Main to dev by @fscorrupt in https://github.com/fscorrupt/posterizarr/pull/559
chore(security): comprehensive security hardening and logging improvements. by @fscorrupt in https://github.com/fscorrupt/posterizarr/pull/560
fix: update postcss to resolve XSS vulnerability by @fscorrupt in https://github.com/fscorrupt/posterizarr/pull/561

Full Changelog: https://github.com/fscorrupt/posterizarr/compare/2.2.41...2.2.42

posterizarr