v4.13.0-rc.2

Code v1.78.2

Changed

• Updated to Code 1.78.2

Fixed

• Proxying files that contain non-ASCII characters
• Origin check when X-Forwarded-Host contains comma-separated hosts

v4.13.0-rc.1

Code v1.78.2

Changed

• Updated to Code 1.78.2

Fixed

• Proxying files that contain non-ASCII characters

v4.12.0

Code v1.77.3

Changed

• Updated to Code 1.77.3
• Ports panel will use domain-based proxy (instead of the default path-based
  proxy) when set via --proxy-domain.
• Apply --app-name to the PWA title.

Added

• Thai translation for login page.
• Debug logs around the origin security check. If you are getting forbidden
  errors on web sockets please run code-server with --log debug to see why the
  requests are being blocked.

v4.12.0-rc.2

Code v1.77.3

Changed

• Updated to Code 1.77.3
• Ports panel will use domain-based proxy (instead of the default path-based
  proxy) when set via --proxy-domain.
• Apply --app-name to the PWA title.

Added

• Thai translation for login page.

v4.12.0-rc.1

Code v1.77.1

Changed

• Updated to Code 1.77.1
• Ports panel will use domain-based proxy (instead of the default path-based
  proxy) when set via --proxy-domain.
• Apply --app-name to the PWA title.

Added

• Thai translation for login page.

v4.11.0

Code v1.76.1

Changed

Updated to Code 1.76.1

v4.11.0-rc.1

Code v1.76.1

Changed

• Updated to Code 1.76.1

v4.10.1

Code v1.75.1

Security

Added an origin check to web sockets to prevent cross-site hijacking attacks on
users using older or niche browser that do not support SameSite cookies and
attacks across sub-domains that share the same root domain.

The check requires the host header to be set so if you use a reverse proxy
ensure it forwards that information otherwise web sockets will be blocked.

v4.10.1-rc.1

Add origin checks to web sockets (#6048)

v4.10.0

Code v1.75.1

Changed

• Updated to Code 1.75.1

Removed

• Removed --link (was deprecated over thirteen months ago in 4.0.1).