• Welcome to the Chevereto User Community!

    Here, users from all over the world come together to learn, share, and collaborate on everything related to Chevereto. It's a place to exchange ideas, ask questions, and help improve the software.

    Please keep in mind:

    • This community is user-driven. Always be polite and respectful to others.
    • Support development by purchasing a Chevereto license, which also gives you priority support.
    • Go further by joining the Community Subscription for even faster response times and to help sustain this space

Work in progress Chevereto v5.0.0 announcement

Added /api/5/storages/apis route

This new API route will enable to list (GET) the storage APIs enabled in your installation.
 
Removed video icon next to video duration on listings

On listings the system will display the video duration without the video icon as it is obvious that the media type can be played if it contains a duration attribute.
 
Improved user profile design now with taller background

User profile gets improved with a taller user background on the profile homepage, for all the other user-land pages the background will be a bit shorter, making better usage of the screen viewport and achieving a better distinction for the user homepage.
 
Added /api/5/tags/{id} route

This new route will provide the means to manage a tag identified by id, with a GET endpoint to retrieve tag details like user_id, number of files, count of views and more. The PATCH endpoint allowing to change both name and description and the DELETE endpoint to delete the resource.
 
Added input report validation on modal forms

Modal forms will now native display the input errors using reportValidity, this means that each input element will inline display the error using your web browser API. It looks like this:

1789991799288.png
^ In this example, the yellow box error contains the generic error (422 Unprocessable Entity) plus the "Stop words found" which is the inline error now added.
 
Added stop words validation for categories

Stop words assertion has been extended to also cover categories.
 
Removed storage minimum capacity constrain

Before Chevereto V5.0, editing a storage required its capacity to be large enough to accommodate the storage's current usage. This made increasing or adjusting storage capacity unnecessarily difficult, as you had to delete files before making the change.

Storage capacity can now be adjusted without being restricted by the current amount of stored data.
 
Fixed bug allowing users to forge site storage asset API IDs

Fixed a security issue that allowed users to manipulate site storage asset API IDs, which caused to break the asset storage form.
 
Fixed security vulnerability <REDACTED> | REDACTED ID.1

<REDACTED>

This is a security vulnerability that will be disclosed after release.
 
Fixed security vulnerability <REDACTED> | REDACTED ID.2

<REDACTED>

This is a security vulnerability that will be disclosed after release.
 
Fixed TLS verification for cURL requests in the upgrade process

The upgrading.php file was missing TLS certificate validation. We fixed the TLS bypass, blocking MITM attacks where fake certs let attackers push malicious or downgraded updates undetected.
 
Fixed security vulnerability <REDACTED> | REDACTED ID.3

<REDACTED>

This is a security vulnerability that will be disclosed after release.
 
Improved Akismet integration with HTTPS, caching, no server params sent

The Akismet integration has been significantly improved: it no longer sends server parameters, all communication now uses HTTPS, and isSpam results are cached to avoid redundant requests.
 
Added MediaMetadata support to video playback

Chevereto V5 now sets the Media Session API's MediaMetadata during video playback, so browsers and operating systems can show the title, artwork, and other details in their native media controls, such as lock screens, notification shades, and media hubs.

1790191804533.png
 

Chevereto Cloud

Back
Top