BunkerWeb v1.6.15 introduces security and feature updates

BunkerWeb v1.6.15, as detailed in the project's GitHub release notes, brings significant changes to security, features, and bug fixes. Notable security updates include stricter validation for folder caches, enhanced NGINX directive handling to prevent configuration injection, and improved sanitization of user-controlled data in the UI. Additionally, mutual TLS support for upstreams has been added, along with expanded configurability for gRPC and reverse proxy plugins. Other enhancements include Docker installer upgrades that preserve secrets and settings, and new Redis-related options for the Web UI.

Operators should carefully review the changes to default behaviors, particularly those related to security and configuration handling. For example, the stricter validation of folder caches and symlink handling may affect systems relying on relative symlinks for cache restoration. Similarly, the new requirement for config_update permissions when moving custom configurations could impact workflows that previously relied on global moves. Before upgrading, operators should test these changes in a staging environment to ensure compatibility with existing setups and workflows.