-
v0.2.1 Stable
released this
2026-10-01 22:10:00 +00:00 | 1 commits to main since this release- Security: all album, artist, song and server text is rendered as plain text, so rich-text tags in music metadata (e.g.
<img src=…>) can't trigger requests to third-party hosts. Network access stays limited to the configured server. Thanks @HANCORE-linux for the review.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Security: all album, artist, song and server text is rendered as plain text, so rich-text tags in music metadata (e.g.