- Added yar.ssl_verify to make TLS certificate verification configurable
- Kept persistent curl connections in the persistent resource list
- Rejected non-public methods in the server dispatcher
- Fixed use-after-free (dangling offset) in REALLOC_BUF_IF_EXCEED
- Fixed size_t underflow when request body is shorter than the protocol header
- Hardened protocol parsing: body length clamping, bounds checks, payload type checks
- Fixed YAR_OPT_PROXY passing the connect timeout to CURLOPT_PROXY
- Fixed issue #175 where Yar_Server::Info returns garbled output.