Skip to content
v0.13.2

This release fixes a security flaw in the REST API and is recommended for all
users.

Resolved issues:

* gui: Update translations (#3125, @AudriusButkevicius)
* lib/connections: Do not resolve addresses (#3129, @AudriusButkevicius)
* cmd/syncthing: Enforce stricter CSRF policy on /rest GET requests (#3134, @calmh)

New enhancements:

* The verbose log output (-verbose) and audit log (-audit) will now contain
  information about changes to local files.

This release changes the behavior of HTTP requests to the /rest interface. All
such requests must now be accompanied by either a CSRF token or the API key.