Web App and API version: 2.5.1.937
This update kills a serious security bug.
Bug fixes
- Data disclosure bug in the ‘download as ZIP’ API end-point has been squashed.
- Desktop agents now properly create roots in clients that sync 200+ top-level folders.
- The desktop agent’s hydration method has several performance improvements.
A huge thank you goes out to the researcher that discovered the API vulnerability, and we’ll be publishing a blog post soon that details exactly what was found, and how we’ve fixed it.
Thanks,
Tom
Co-founder
