Component: www

7.21 Stable 2026-Jan-12 (3 weeks ago)

• added option to disable individual web services in /ip/service/webserver and IP>Services>Web Server;
• handle escaped characters in resource IDs and names for REST API requests;
• process REST API requests only after user authentication is completed;
• removed ability to publish directories via "/files" www service;

7.20.1 Stable 2025-Oct-10 (3 months ago)

• improved stability (CVE-2025-10948);

7.16 Stable 2024-Sep-20 (1 year ago)

• log out inactive REST API users;

7.12 Stable 2023-Nov-09 (2 years ago)

• fixed allowed address setting for REST API users;
• fixed fragmented POST data for SCEP service;

6.49.10 Long-term 2023-Sep-15 (2 years ago)

• improved service stability when receiving malformed packets;

7.9 Stable 2023-May-02 (2 years ago)

• allow unsecure HTTP access to REST API;

7.6 Stable 2022-Oct-17 (3 years ago)

• improved stability when receiving bogus packets;

7.2 Stable 2022-Mar-31 (3 years ago)

• fixed "tls-version" for SSL;

6.47.10 Long-term 2021-May-31 (4 years ago)

• added "X-Frame-Options" header information to disallow website embedding in other pages;

6.48.3 Stable 2021-May-25 (4 years ago)

• added "X-Frame-Options" header information to disallow website embedding in other pages;

6.46.7 Long-term 2020-Sep-07 (5 years ago)

• added "tls-version" parameter in "IP->Services" menu;

6.47.2 Stable 2020-Aug-13 (5 years ago)

• improved WWW service stability when receiving bogus packets;

6.47 Stable 2020-Jun-02 (5 years ago)

• added "tls-version" parameter in "IP->Services" menu;

6.44.5 Long-term 2019-Jul-04 (6 years ago)

• improved client-initiated renegotiation within the SSL and TLS protocols (CVE-2011-1473);

6.45.1 Stable 2019-Jun-27 (6 years ago)

• improved client-initiated renegotiation within the SSL and TLS protocols (CVE-2011-1473);

6.40.3 Stable 2017-Sep-01 (8 years ago)

• fixed unresponsive Web services (introduced in v6.40);

6.34.2 Stable 2016-Feb-18 (9 years ago)

• fixed www crash.

6.33.1 Stable 2015-Nov-17 (10 years ago)

• put correct path to Winbox v3.0 for new installations with branding package;

6.12 Stable 2014-Apr-14 (11 years ago)

• added support for HTTP byte ranges;