Web App and API version: 2.5.1.937

This update kills a serious security bug.

Bug fixes

• Data disclosure bug in the ‘download as ZIP’ API end-point has been squashed.
• Desktop agents now properly create roots in clients that sync 200+ top-level folders.
• The desktop agent’s hydration method has several performance improvements.

A huge thank you goes out to the researcher that discovered the API vulnerability, and we’ll be publishing a blog post soon that details exactly what was found, and how we’ve fixed it.

Thanks,
Tom
Co-founder