File Details
fentlib-0.0.47-dev.jar
- R
- May 14, 2026
- 7.09 MB
- 1
File Name
fentlib-0.0.47-dev.jar
Supported Versions
- Fixed Referer-based bypass in the HTTP port reverse proxy that let attackers reach arbitrary paths on upstream ports
- Fixed path traversal in the HTTP port reverse proxy via
../ percent-encoded variants escaping the mounted route prefix - HTTP port reverse proxy now forwards only an allow-list of request headers to upstreams, preventing header smuggling (
Authorization,Cookie,X-Forwarded-*, etc.) to localhost services - Added support for modern and HD skins to
ClientUtil.drawPlayerFace(moved over from Wawel Auth)

