---
title: "squashing bugs, improving security and ux"
date: "1 Oct, 2024"
banner:
    file: "meowth101hammer.webp"
    alt: "meowth plush getting squished with a hammer."
---

this update enhances the cobalt experience all around, here's everything that we added or changed since 10.0:

### saving improvements:
- youtube videos encoded in av1 are now downloaded in the webm container. they also include opus audio for the best quality all around.
- fixed various bugs related to the download process on older devices/browsers. cobalt should work everywhere *within sane limits*.
- fixed downloading of twitch clips.
- fixed a bug where cobalt wouldn't download bluesky videos that are in a post with a quote.
- fixed a bug that caused some youtube music videos to fail to download due to differently formatted metadata.
- cobalt will no longer unexpectedly open video files on iOS. instead, a dialog with other options will be shown. this had to be done due to missing "download" button in safari's video player. you can override this by enabling [forced tunneling](/settings/privacy#tunnel).
- fixed a bug in filename generation where certain information was added to the filename even if cobalt didn't have it (such as youtube video format).

### general ui/ux improvements:
- added a button to quickly copy a link to the section in settings or about page.
- added `(remux)` to filenames of remuxed videos to distinguish them from the original file.
- improved the look & behavior of the sidebar.
- fixed cursor appearance to update correctly when using the sidebar or subpage navigation.
- added a stepped scroller to the donation options card [on the donate page](/donate).
- tweaked the [donate page](/donate) layout to be cleaner and more flexible.
- fixed tab navigation for donation option buttons.
- updated the [10.0 changelog banner](/updates#10.0) to be less boring.
- fixed a bug that caused some changelog dates to be displayed a day later than intended.
- changelog banner can now be saved with a right click.
- cobalt version now gently fades in on the [settings page](/settings).
- fixed the position of the notch easter egg on iPhone XR, 11, 16 Pro, and 16 Pro Max.
- cobalt will let you paste the link even if the anti-bot check isn't completed yet. if anything goes wrong regarding anti-bot checks, cobalt will let you know.
- fixed a bunch of typos and minor grammatical errors.

### about page improvements:
- added motivation section to the [general about page](/about/general).
- added a list of beta testers to the [credits page](/about/credits).
- rephrased some about sections to improve clarity and readibility.
- made about page body narrower to be easier to read.
- added extra padding between sections on about page to increase readibility.

### internal improvements:
- cobalt now preloads server info for quicker access to supported services & loading turnstile on demand.
- converted all elements and the about page to be translatable in preparations for community-sourced translations *(coming soon!)*.
- added `content-security-policy` header to restrict and better prevent XSS attacks.
- moved the turnstile bot check key to the server, making it load the script on the client only if necessary.
- fixed a bug in the api that allowed for making requests without a valid `Accept` header if authentication wasn't enabled on an instance.

if you wish, you can check [all commits since the 10.0 release on github](https://github.com/imputnet/cobalt/compare/08bc5022...main).

we hope you enjoy this stable update and have a wonderful day!

\~ your friends at imput ❤️