diff --git a/docs/releases.md b/docs/releases.md index 4c89f93d..ab25c74e 100644 --- a/docs/releases.md +++ b/docs/releases.md @@ -30,6 +30,41 @@ ## Version 6 +### v6.6.3 + +Released on May 17, 2025 + +#### Fix broken hotlinking prevention + +This version fixes the hotlinking prevention that was broken since version 6.6.0. +We also added a few tests to make sure that this bug does not happen again. + +* `fix` #3348 : Fix secure link missing route by @ildyria. + + +### v6.6.2 + +Released on May 15, 2025 + +#### iFrame integration support and auto open upload popup + +One of our users noticed that version 6 was not working within iFrames. This is because we have secure headers +to avoid clickjacking. We added one `.env` variable `SECURITY_HEADER_CSP_FRAME_ANCESTORS` (empty by default) +which allows to add the domains that are allowed to load Lychee in an iFrame. Note that this kind of integration +of Lychee is not recommended as the cookies will also be set with the policy `SameSite=None`. +If you wish to use iFrames, to make sure that the configuration remains secure, +you will also have to set the `SESSION_SECURE_COOKIE` to `true` in your `.env` file. + +The second change is a small one, but it is a nice addition: by adding `#upload` to a Lychee album url, +the upload popup will be automatically opened. This is aimed as users who wish to give an upload link to their friends. +Note that this will require you to have guest upload enabled in the album settings. + +* `new` #3343 : Add insecure options (with secure defaults) to use Lychee in iFrames by @ildyria. + > This setting needs to be enabled via `.env` configuration and is disabled by default. +* `new` #3340 : Add `#upload` to trigger upload modal from url in an album by @ildyria. + > For this to work, guest upload must be enabled in the album settings. + + ### v6.6.1 Released on May 12, 2025 diff --git a/src/components/widgets/Announcement.astro b/src/components/widgets/Announcement.astro index 2719fae6..776b3567 100644 --- a/src/components/widgets/Announcement.astro +++ b/src/components/widgets/Announcement.astro @@ -10,8 +10,8 @@ >NEW Lychee 6.6.1 is now available! »Lychee 6.6.3 is now available! »