Web App and API version: 18.104.22.1687
This update kills a serious security bug.
- Data disclosure bug in the ‘download as ZIP’ API end-point has been squashed.
- Desktop agents now properly create roots in clients that sync 200+ top-level folders.
- The desktop agent’s hydration method has several performance improvements.
A huge thank you goes out to the researcher that discovered the API vulnerability, and we’ll be publishing a blog post soon that details exactly what was found, and how we’ve fixed it.