ShareSecure Return to App

Changelog

Every release, every change — documented publicly.

v1.2.0 May 2026 Latest

New Features

  • Image uploads — PNG and JPEG files now accepted alongside PDF and DOCX. Magic byte validation ensures content integrity.
  • Annotation system restored — Per-document drawing toolbar with pen, highlighter, eraser, cursor and 10 colours. Annotations saved server-side, per-link isolated.
  • Annotation keyboard shortcuts — C=cursor, P=pen, H=highlight, E=eraser, Z=undo, X=clear page, 1–0 cycle colours.
  • Two-column dashboard layout — Upload form and file dashboard shown side-by-side after login on desktop.
  • Upload result modal — Success state shown as a popup overlay with link, QR code and actions. Upload form stays accessible behind it.
  • Anonymous file inbox — Send files to registered users without revealing your identity.

Privacy & Security

  • Session-only auth — Auth token moved to sessionStorage. Sessions no longer persist across browser restarts.
  • 10-day expiry cap — Maximum link lifetime reduced to 10 days. Expiry options cleaned up (removed 1 min, 5 min, 14-day, 30-day).
  • No user-file association — Server never stores a user ID next to a file. Dashboard data lives in localStorage only.
  • ZK anonymous uploads — Groth16 zero-knowledge proofs used for rate-limit enforcement without revealing identity.

Viewer Polish

  • Search removed — PDF text search removed to prevent content extraction via search queries.
  • Compact countdown — Timer now shows "4d 2h" / "3h 45m" / "12m 30s" instead of verbose "70h 23m 14s".
  • Fit-to-width icon — Fixed duplicate fullscreen/fit icon. Fit button now uses a distinct expand-diagonal icon.
  • Title truncation — Document title truncated more aggressively to prevent overlap with the countdown timer.
v1.1.0 March 2026

Security & Privacy

  • In-file metadata stripping — Automatic scrubbing of PDF and DOCX metadata (Author, computer, revision info).
  • HMAC integrity hashes — HMAC-SHA256 keyed with a secret salt prevents correlation with public file databases.
  • Security headers — Full suite of Referrer-Policy, nosniff, Frame-Options, and Permissions-Policy.
  • Reduced database footprint — Removed short_id from upload logs to break user→file association.

Bug Fixes

  • Upload quota bypass closed — Quotas now persist even if a file is immediately deleted.
  • DOCX Viewer — Fixed rendering of Word documents using Mammoth.js for client-side HTML conversion.
  • Memory leaks — Resolved various TypeError crashes related to DOM replacement.
v1.0.x March 2026 Patches

Features

  • Self-host Admin Mode — Automatic detection and exposure of admin UI for local deployments.
  • Document Rename — Uploaders can set custom display names for their files.
  • Forward Secrecy — Per-file key wrapping for stored content.
  • Screenshot Protection — Blackout behaviors on tab blur or visibility change.