Skip to content

version 6.6.2~6.6.3 #204

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ildyria merged 4 commits into from
May 17, 2025
Merged

version 6.6.2~6.6.3 #204

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
90e6987
version 6.6.2
ildyria May 15, 2025
1a51910
Apply suggestions from code review
ildyria May 15, 2025
f9eb6e8
well... 6.6.3
ildyria May 17, 2025
615fc26
Update docs/releases.md
ildyria May 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 35 additions & 0 deletions docs/releases.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,41 @@

## Version 6

### v6.6.3

Released on May 17, 2025

#### Fix broken hotlinking prevention

This version fixes the hotlinking prevention that was broken since version 6.6.0.
We also added a few tests to make sure that this bug does not happen again.

* `fix` #3348 : Fix secure link missing route by @ildyria.


### v6.6.2

Released on May 15, 2025

#### iFrame integration support and auto open upload popup

One of our users noticed that version 6 was not working within iFrames. This is because we have secure headers
to avoid clickjacking. We added one `.env` variable `SECURITY_HEADER_CSP_FRAME_ANCESTORS` (empty by default)
which allows to add the domains that are allowed to load Lychee in an iFrame. Note that this kind of integration
of Lychee is not recommended as the cookies will also be set with the policy `SameSite=None`.
If you wish to use iFrames, to make sure that the configuration remains secure,
you will also have to set the `SESSION_SECURE_COOKIE` to `true` in your `.env` file.

The second change is a small one, but it is a nice addition: by adding `#upload` to a Lychee album url,
the upload popup will be automatically opened. This is aimed as users who wish to give an upload link to their friends.
Note that this will require you to have guest upload enabled in the album settings.

* `new` #3343 : Add insecure options (with secure defaults) to use Lychee in iFrames by @ildyria.
> This setting needs to be enabled via `.env` configuration and is disabled by default.
* `new` #3340 : Add `#upload` to trigger upload modal from url in an album by @ildyria.
> For this to work, guest upload must be enabled in the album settings.


### v6.6.1

Released on May 12, 2025
Expand Down
4 changes: 2 additions & 2 deletions src/components/widgets/Announcement.astro
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@
>NEW</span
>
<a
href="https://github.com/LycheeOrg/Lychee/releases/tag/v6.6.1"
class="text-slate-200 hover:underline dark:text-slate-200 font-medium">Lychee 6.6.1 is now available! »</a
href="https://github.com/LycheeOrg/Lychee/releases/tag/v6.6.3"
class="text-slate-200 hover:underline dark:text-slate-200 font-medium">Lychee 6.6.3 is now available! »</a
>
<a
target="_blank"
Expand Down