v1.19.8
What's Changed
- For security reasons, the "path" parameter of
/configs
in the restful api has been restricted, and its directory also needs to be in workdir orSAFE_PATHS
. - Other incompatible updates are the same as v1.19.6:
- For security reasons, all paths appearing in the configuration file will be limited to workdir (regardless of whether they are relative or absolute). If there is a specific need, please specify additional safe paths by setting the
SAFE_PATHS
environment variable while ensuring safety. The syntax of this environment variable is the same as the PATH environment variable parsing rules of this operating system (i.e., semicolon-separated under Windows and colon-separated under other systems)- In addition, support for specifying
routing-mark
andinterface-name
forproxy-groups
has been removed. Please specify the relevant parameters inproxies
directly.
- Note: The workdir mentioned above is specified by the
-d
parameter when the program is started or theCLASH_HOME_DIR
environment variable. If neither of the above is specified, the default is:- on Unix systems,
$HOME/.config/mihomo
. - on Windows,
%USERPROFILE%/.config/mihomo
.
- on Unix systems,
BUG & Fix
Maintenance
- 2116640 chore: the updateConfigs api also adds a check for
SAFE_PATHS
by @wwqgtxx - 23e2d3a chore: rebuild provider load by @wwqgtxx
- 266fb03 chore: update dependencies by @wwqgtxx
- 76e9607 chore: move start healthcheck.process() from New to Initial in provider avoid panic cause by build-in proxy have not set to tunnel by @wwqgtxx
Full Changelog: v1.19.7...v1.19.8