- Published on
Beta v0.8.5 - New Modules
- Authors
- Name
- Alex Lee
- Title
- CEO
- @alexjoelee
Added
- Storage: Backend object storage is live in the beta application and functional on the platform. Go from uploading an object to serving it on a custom domain with SSL globally in under 30 seconds.
- Storage: By default, the Content-Type response header is automatically rewritten based on what the file extension is.
- Javascript Challenge: We have implemented a Javascript Proof-of-Work challenge based on this Caddy module: https://github.com/steffenbusch/caddy-bot-barrier - This requires a user's browser to perform a non-interactive computational test.
Fixed
- Web Application Firewall (WAF): Coraza WAF and the Core Rule Set is now enabled for all sites and all requests on the pre-UI beta. By default, all sites on our network will automatically benefit from protection with the OWASP Core Rule Set (CRS) as well as Skip2-managed rules, like the one we implemented to mitigate CVE-2025-55182/React2Shell: https://www.skip2.net/blog/security/CVE-2025-55182