Список изменений
Security / Hardening
- Removed all reflective private field access (replaced with explicit getters and helper methods) to improve transparency and reduce maintenance risk.
- Web session auth now migrates
?session=token intoAuthorization: Bearer <session>header; SPA strips token from the URL (prevents accidental leakage via history/referrer). - Added hashed API token support (
web.api.token-hashes) using SHA-256 lowercase hex digests with constant-time comparison. - Plain
web.api.tokensstill accepted for backward compatibility; one-time deprecation warning when hashes also configured.
Файлы
TheEndex-1.3.0.jar(1.94 MiB)
ОсновнойМетаданные
Канал релиза
Release
Номер версии
1.3.0
Загрузчики
BukkitPaper
Версии игры
1.20–1.20.6
Загрузок
4
Дата публикации
4 мес. назад

