# KoalaSync Changelog All notable changes to the KoalaSync browser extension and relay server. --- ## [v2.0.2] — 2026-06-02 ### Fixed - Peer identity spoofing in relay server: client-supplied `peerId` could be used to impersonate other peers in PEER_STATUS events. Server now always stamps `peerId` with the authenticated sender's identity. - Amazon domain detection: replaced broad `includes('amazon.')` substring check with boundary-safe regex that correctly matches all Amazon storefronts (`amazon.com`, `amazon.de`, `amazon.co.uk`, etc.) while rejecting lookalike domains. --- ## [v2.0.1] — 2026-06-01 ### Fixed - Video detection on Prime Video: `findVideo()` now scores all video elements by size, duration, and mute state instead of picking the first one. Fixes 0×0 placeholder being selected over the actual player. - History entries in debug report showing `?` instead of action names. - Prime Video status in compatibility matrix updated to reflect partial support. ### Added - Multi-video overview table in Copy Debug Report when a page has more than one `