serrebi/SerrebiTorrent
Watch
1
2
Fork
You've already forked SerrebiTorrent
 0
mirror of https://github.com/serrebidev/SerrebiTorrent.git synced 2026-08-13 08:46:52 -07:00
Code Issues Projects Releases 22 Packages Wiki Activity
22 releases 72 tags
  • v1.7.3 6594b3d170

    V1.7.3 Stable

    serrebi released this 2026-06-21 08:44:26 -07:00 | 30 commits to main since this release

    Breaking

    • None

    Features

    • None

    Fixes

    • fix: harden remote clients, updater, and web safety; pre-release bug fixes
      • Fix deferred temp-dir cleanup: a PowerShell param() block under
      • Fix the rollback failure dialog to read the log path from
    • realistic rTorrent fixture; broad coverage across the changed modules.

    Other

    • Remote clients (clients.py):
      • rTorrent: report real seeder/leecher counts from peers_complete /
    • peers_accounted. The connection_seed / connection_leech columns are
    • string constants ("seed"/"leech"), not counts, so the prior mapping
    • coerced connected peers to 0 for every torrent.
      • qBittorrent v5 state normalization and Transmission field handling;
    • SSRF-safe torrent URL download with per-redirect re-validation.
    • Updater / release pipeline (updater.py, update_helper.bat):
    • -Command never binds trailing arguments, so the generated cleanup
    • script silently deleted nothing. Bind paths via environment variables.
    • $env:LOG_FILE (same param()-binding defect left it blank).
      • Remove the downloaded ZIP + extracted tree on any failed or canceled
    • update instead of leaking it until the next startup sweep.
      • Zip-slip / decompression-bomb caps and Authenticode + manifest
    • thumbprint verification on update download.
    • Web server (web_server.py): SSRF private-IP/DNS-rebind/redirect checks,
    • CSRF protection, and session invalidation on credential change.
    • Other: config default-profile repair; list_torrents no longer flags
    • benign Windows "operation completed successfully" status as Failed;
    • drop a redundant duplicate import in clients.py.
    • Tests: regression guards for the PowerShell param()-binding defect and a
    • Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com
    Downloads