Historique des versions de Headend

• Security: complete escaping (including quotes) on the admin pages, so channel names or errors from IPTV/EPG lists cannot run code; addresses coming from IPTV lists, guides and logos can no longer target the local network or the server itself (the configured receiver stays allowed on its streaming port; new option "Local network IPTV sources", switched on automatically on upgrade if saved sources are already on the local network); dependency install no longer runs anything through sudo — the page shows a root command that verifies the scripts' SHA-256; persistent PIN attempt limits with growing lockouts and a server-wide budget (new PINs need at least 6 digits; the existing PIN keeps working); adult channels left open without an unlocked viewer are closed; the live buffer and downloads (playlists, XMLTV, catalog) are bounded; IPTV addresses are logged without account and password; the receiver's SSH user is validated; backups no longer contain the PIN hash.
• Security (Emby): in inclusive ("allowed") tag mode the adult tag is no longer added to the user's list (and is removed if an older version added it).
• Security (licensing): logs sent to medialab.works or exported no longer contain tokens, passwords or keys (lines are selected by the plugin's logger and secrets are masked); unencrypted license-server replies are refused; update and rollback install only packages with a verified MediaLab signature (and a size limit); the log export no longer puts the token in the URL; the License page escapes text in attributes correctly.
• Fixed: the active-license badge in the page header is readable on the dark theme (the text is no longer black).
• Also includes the privacy changes from 0.2.9: private defaults for new installs, the receiver's SSH host key verified, the OpenWebif password encrypted, the payment QR generated locally.

• Privacy: the payment QR code on the License page is now generated locally, in the page; the payment link is no longer sent to a third-party QR service (api.qrserver.com).
• Privacy, NEW installations only: the receiver SSH watchdog and the external sources (iptv-org channels and genres, guides from programetv.ro, cinemagia.ro, epgshare01 and open-epg) start switched off; on first setup the Headend page shows a checklist explaining what each one contacts, with checkboxes. Existing installations keep all their settings (detected by the settings file existing at startup; ConfigVersion 3).
• The watchdog now verifies the receiver's SSH host key (trust on first use): the key is saved at the first connection in the plugin data folder, and if it changes the command is not sent and a clear message is shown. The watchdog card shows the saved fingerprint and a "Forget saved key" button (after reflashing the receiver).
• The receivers' OpenWebif password is no longer stored in plain text in the Emby Live TV configuration: it is encrypted at rest (AES-256-GCM, key bound to the server id, files with mode 600) and never sent to the browser; the receiver page only shows "set ✓" (type to replace, "Clear" to remove). Existing passwords are moved automatically on first start.

• The "Receiver watchdog" card shows correctly whether the watchdog is enabled right after Emby starts: it is read directly from the settings and the license, not only after the first check (~90 s).

With short HLS segments, Emby's ffmpeg now analyzes the live stream for 0.5 s instead of 3 s (Emby already provides the decoder and tracks). Requires reinstalling the short HLS segments setup (install-live-hls.sh).

• Faster start for GPU-converted channels (SD upscaled to HD): ffmpeg now spends 0.5 s instead of 1.5 s analyzing the stream when the codec is already known.
• Author: MediaLab Works.

• Licensing: "Install update" and rollback check the license right before running (at most once an hour: a successful response less than an hour old is reused), require a valid license and show the reason when the platform refuses (update period expired, license expired, etc.). Rolling back to the previous allowed version is also available when the version you run is covered (button on the License page). The "Check now" button respects the platform's rate limit.

• Licensing: a problem reading the plugin file can no longer block the license check. Previously, the error "The value cannot be an empty string (Parameter 'path')" could prevent activation and the daily check.
• Also includes 0.2.3 (not published separately): tuners counted per frequency, channel and guide providers (iptv-org, epgshare01, open-epg), and settings migrated when the IPTV service starts.
• The admin pages follow the display language chosen in Emby (Settings → Display → Language). On Emby 4.10 they previously always appeared in English.
• Licensing: when your email address already has a medialab.works account, the payment link (trial or purchase) is sent only by email and is no longer shown in the plugin. The License page shows the server's message as a notice in the "Payment in progress" card (no payment button or QR code), keeps the payment pending and checks for it until the link expires (24 hours: every 5 seconds in the first hour, then once a minute); after that it shows "The payment link has expired". Nothing changes for new addresses.

• If the license was moved to another server or the hardware changed, you now get a clear message with instructions (enter your key again).
• The hardware fingerprint stays stable across restarts (Docker, VPN and bridge interfaces, and the order of network interfaces, are ignored).

• Without a valid license the plugin stops working (no scheduled tasks; its API responds with the reason).
• The license status is shown in the page header, with a link to the License page.
• Updates come only from medialab.works, based on your active license.

First public release: medialab.works licensing, interface in English and Romanian, compatible with Emby 4.10.