OPanel 2.2.3
What's new
By @NriotHrreion
Add
- Pre-made cron task templates (#477)
- Auto-generated date and time in downloaded save names (#477)
Fix
- Enforce explicit HTTP auth route roles (#487)
- Bounded and automatically expired failed-login records to prevent malicious requests from causing unbounded memory usage (#488)
- Hardened access-key login by making CRAM challenges IP-bound, single-use, time-limited, and capacity-limited (#489)
- Prevent path traversal issue in control endpoints (#492)
- Prevent MCP token from accessing MCP token management and OIDC allowlist management (#493)
- Keep terminal card scrollable in narrow screens (#495)
- Initialize access key before starting the web server (#494)
Change
- Upgrade vinext to
1.0.0-beta.10 - Upgrade minecraft-textures to
26.3.0 - Adapt RSC handler to new vinext request format (see upstream: https://github.com/cloudflare/vinext/pull/3112) (#483) (#485)
> [!NOTE] > Upgrade to this version is RECOMMENDED if you enabled OIDC and your OPanel version is >= 2.1.4 and <= 2.2.2
> [!NOTE] > The minecraft version on the jar file indicates the minimum required game version

