expand placeholder

made it just in time! (EDIT: nevermind, three of the containers didn't finish uploading to ghcr before takeoff ;_; all up now)

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

no vulnerabilities since 2023-07-23

• there is a discord server with an @everyone in case of future important updates
• v1.8.7 (2023-07-23) - CVE-2023-38501 - reflected XSS
• v1.8.2 (2023-07-14) - CVE-2023-37474 - path traversal (first CVE)
  • all serverlogs reviewed so far (5 public servers) showed no signs of exploitation

new features

• #56 placeholder variables in markdown documents and prologue/epilogue html files
  • default-disabled; must be enabled globally with --exp or per-volume with volflag exp
  • {{self.ip}} becomes the client IP; see /srv/expand/README.md for more examples
• dynamic-range-compressor: reduced volume jumps between songs when enabled

bugfixes

• v1.9.14 broke the scan volflag, causing volume rescans to happen every 10sec if enabled
  • its global counterpart --re-maxage was not affected

---

⚠️ not the latest version!