• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2026-07-27)

recent important news

• v1.20.19 (2026-07-27) fixed an FTP-server vuln (upload outside defined volumes)
• v1.20.17 (2026-07-06) fixed a vuln when a volume has both filekeys and dirkeys enabled
• v1.20.17 (2026-07-06) introduced csp nonces, possibly breaking some javascript-based plugins

🧪 new features

• #1602 custom thumbnail extractors; docs/example (thx @kamaeff!) 1864805 dbc6df8
• #1604 u2c: password can be provided in env-var U2C_PW (thx @shermanhlc!) 4729747
• wopi: option --wopi-accs to limit who's able to use the feature 78a4ee4
  • also fixes wopi on servers where user does not have read/write-access to root volume
  • also restricts the token to just that one file; good if the wopi-client is some cloud thing that shouldn't be trusted
• #1591 wopi: use persistent file-ID which is necessary for real-time collab (thx @kamaeff!) efcf96e
• #1605 the lightbox can show svg images now 825f1c9

🩹 bugfixes

• up2k: client could waste a little bandwidth while recovering from a network glitch 18791c5
• if PRTY_CONFIG is set to a config-file that is also autodetected, then explain the misconfiguration instead of crashing like before 14e2d79
• wopi: fix session-timeout hint to clients (thx @kamaeff!) 92c3f32
• js: fix chance of duplicate prologue on very first page visit eeb399e
• js: fix panic on image dragdrop out of the browser window dcc0abd

🔧 other changes

• up2k: client now detects when server or reverseproxy is incorrectly configured with an impractically small request-body-size-limit, crashing the website with an explanation how to fix it f19ef03
  • also allows setting the chunksize all the way down to 1 megabyte when absolutely necessary (bad idea, slow)
• new option --allow-svg-js if you really want that 566de65
• shares: harden single-file shares some more 21c2c72 9ff6a71
  • just removing footguns (motivated by a bug-report that was a false-positive)
• copyparty.exe: upgrade to python 3.14.7 from 3.13.14 8b6e897
  • larger and slightly faster (compensated for the size bloat by making the text-image-generator more shitty)

🌠 fun facts

• the thumbex example is also a cool example how relevant the "pseudo" in PRNG can be; with random.randrange instead of os.urandom, first run followed by restarting copyparty and another run...heh

⚠️ not the latest version!