TVFS: Fixed directory deletion and renaming potentially bypassing restrictions configured in mount points
TVFS: Fixed simultaneous file requests potentially exceeding the limit on open files per session
Web Client: Fixed shared-link tokens potentially being used to renew login sessions
Web Client: All REST API requests and shared links now require HTTPS
Web Client: Updated Quasar to fix a security vulnerability
Web Client: Fixed filenames containing special characters being interpreted as HTML in delete confirmation dialogs
Web Client: Limited request sizes, excluding file uploads, to prevent excessive memory use and server termination
New features:
System users can now sign in without a password while accessing files with their system account's permissions
Directories configured in mount points are now created when first accessed, rather than in advance
UI: Expand a session to see its active transfers, their source addresses and start times, and the session's overall progress
UI: Enable or disable individual listeners without removing their settings; protocol now appears before address and port
New installations include disabled Web Client HTTPS listeners on port 443 for IPv4 and IPv6
Added browser-based file access and sharing through the Web Client
Web Client: Choose a light, dark or system theme and adjust text size and color intensity; preferences are remembered and shared across browser tabs
Web Client: Administrators can choose sign-in as the default page when no public site is enabled, and All files as the destination after signing in from Home
Web Client: Can be installed as an app in supporting browsers
Web Client: Uploads continue while browsing other pages, with grouped progress and controls to pause, resume, cancel and retry
Web Client: Added upload history stored in the browser, with completion dates and recovery of interrupted uploads when access to the original file is available
Web Client: Files, shared links, uploads and account sessions have table and timeline views, with a searchable date index
Web Client: Navigation and preview layouts adapt to available space, keeping controls accessible on narrow screens; desktop sidebar expansion is remembered
Web Client: Upload entire folders, including nested files and empty subfolders, by selecting or dropping them where supported
Web Client: When a file already exists, choose whether to replace it or resume its upload. Choices can apply to the whole upload batch
Web Client: File lists now identify symbolic links and shared files and directories
Web Client: Move files and folders individually or in groups using a destination picker, or move an item by entering a destination path when renaming
Web Client: Improved dark-mode contrast for controls, links and selected items
Web Client: Added audio playback and seeking in audio and video previews without downloading the entire file first
Web Client: Improved file previews with keyboard navigation, syntax highlighting, clearer playback errors and updates after renaming or replacing files
Web Client: Preview details show file formats, text encodings, sizes and modification times; UTF-16 text with a byte-order mark displays correctly
Web Client: Added Compact interface density, with smaller icons and tighter spacing while preserving text size; small screens use it automatically
Web Client: Administrators can enable browser caching of files accessed while signed in. Caching is disabled by default because copies may remain on the device after sign-out
Web Client: Added an account page to view active sessions and end them remotely
Web Client: Added controls to copy, edit, delete and temporarily disable shared links. Editing or re-enabling a link preserves its URL
Web Client: Shared links can optionally identify their owner to recipients
Web Client: Public file sharing can now be controlled globally and per user or group
Web Client: Added browsable REST API documentation with search, examples and descriptions of request and response formats
Web Client: Administrators can publish Markdown pages with customizable navigation and offer files for download. Built-in help and an optional example site are included
Web Client: Public pages support rich Markdown, embedded files and media, and customizable layouts
Web Client: Added an always-accessible Copyright and License page with the software license and third-party notices
Bugfixes and minor changes:
FTP: Fixed MLST and MLSD permission facts being sent as "perms" instead of the standard "perm", preventing clients from recognizing advertised permissions
Directory listings retain unavailable mounts with unknown metadata instead of failing the entire listing
UI: Improved dialog positioning, spacing and font scaling
Fixed transfers potentially being reported as complete before files had finished being written and closed
Fixed connections potentially stalling while sending data or closing
Fixed potential login failures caused by invalid data in pending authentication requests
Fixed a user's group membership potentially being applied more than once
The %<home> placeholder now requires accessing files with the system account's permissions (filesystem impersonation), not just using that account to sign in; otherwise its home directory may be unavailable
Fixed handling of certificate chains and user-provided certificate paths
Fixed inherited mount paths and permissions not updating when overridden by user or group settings
Fixed misleading errors when automatically creating mount-point directories that already exist
TLS: Fixed misleading errors when clients disconnect during connection setup
TLS: Fixed missing client addresses in connection throttling logs
FTP: Fixed failed or stalled passive-mode transfers and cancellation while resolving the server's address
FTP: Fixed the response code sent at the end of a STAT directory listing
FTP: Transfer error messages now distinguish socket reads and writes and no longer describe an unknown error source as a file-write failure
FTP: Fixed LIST and STAT showing full paths instead of file names when requesting information about individual files
Web Client: Resumed downloads check that the file has not changed, avoiding a mix of data from different versions
UI: Banning an IP from an expanded transfer now targets that transfer's source address
UI: Session protocol names now indicate whether the connection is encrypted
UI: The session list no longer jumps to another scroll position when sessions are added or removed
UI: Path validation errors now give relevant guidance, and invalid mount paths remain available for correction instead of reverting to the previous value
UI: Fixed a crash when hovering over sessions immediately after connecting
UI: Added warnings when the server cannot access files or load the home directory using the selected system account
UI: Fixed duplicated users retaining the original identity and a crash when removing users or groups
Web Client: Fixed handling of spaces in form fields, including credentials and shared paths
Web Client: Fixed outdated sign-in status and requests failing when the login session needs to be renewed
Web Client: Warn before leaving unfinished operations and offer to reload the app after a server update
Web Client: Reduced application download sizes
Web Client: Fixed the upload form not appearing in Firefox
Web Client: Downloads use the browser's download manager, with a separate Save as... action where supported
Web Client: File lists now refresh reliably after changes to files and folders
Web Client: Clearer file-operation errors with readable resource paths
Web Client: Common file and shared-link actions are available directly on rows when space permits
Web Client: Shared links follow files and folders renamed or moved through the Web Client, and are disabled if an affected change fails
Log in
