Code

History

Commits on test35+
  1. serve docker: fix tests leaving unkillable processes and stale FUSE mountsNick Craig-Wood committed 2 months agoe855d2e
  2. archive: fix listing entries with a leading slash as if they were in the rootNick Craig-Wood committed 2 months agob88e237
  3. archive: fix zip file entries named for a directory causing confusionNick Craig-Wood committed 2 months agoda352a2
  4. archive: fix corrupt listings when listing a zip directory more than onceNick Craig-Wood committed 2 months ago68eab60
  5. seafile: fix corrupted uploads after a retried upload errorNick Craig-Wood committed 2 months ago6cdd0ea
  6. filescom: fix corrupted uploads after a retried upload errorNick Craig-Wood committed 2 months agofa43f10
  7. pixeldrain: fix corrupted uploads after a retried upload errorNick Craig-Wood committed 2 months agof4cd80a
  8. operations: fix making a directory with modtime asking twice with --interactiveNick Craig-Wood committed 2 months agob940ce6
  9. sync: fix directory modtimes being set twiceNick Craig-Wood committed 2 months ago351d70f
  10. accounting: add "Updated dirs" count of directory modtime/metadata updates to the statsNick Craig-Wood committed 3 months ago6afb98b
  11. operations: show directory operations in the --progress displayNick Craig-Wood committed 3 months agof998f5b
  12. accounting: add NewCheckingTransferNoHistory constructorNick Craig-Wood committed 2 months ago7fe4025
  13. Add Shane McCarron to contributorsNick Craig-Wood committed 2 months agoffe855f
  14. fs/fshttp: fix TestCertificates leaking client cert/key onto global configShane McCarron committed 2 months ago1b4dea8
  15. Changelog updates from Version v1.75.1Nick Craig-Wood committed 2 months ago73119d3
  16. fshttp: don't send --header values to other hosts on redirect GHSA-486v-q2wf-fp2r CVE-PENDINGNick Craig-Wood committed 2 months ago399bc6a
  17. http: don't leak configured headers to other hosts or over plaintext on redirect GHSA-486v-q2wf-fp2r CVE-PENDINGNick Craig-Wood committed 2 months agoaef94cd
  18. rest: add SameHost and check HTTPS downgrades against the original request GHSA-486v-q2wf-fp2r CVE-PENDINGNick Craig-Wood committed 2 months ago31a8164
  19. archive: hide any archive entry which escapes the directory being listed GHSA-66hp-wgxq-6f5qNick Craig-Wood committed 2 months agoe1b0c09
  20. archive: fix "directory not found" for archive paths containing "./" or "//" GHSA-66hp-wgxq-6f5qNick Craig-Wood committed 2 months ago3217537
  21. archive: fix zip entry named "." hiding every other file GHSA-66hp-wgxq-6f5qNick Craig-Wood committed 2 months ago45391c0
  22. archive: reject unsafe entry names when mounting squashfs images GHSA-66hp-wgxq-6f5qNick Craig-Wood committed 2 months ago7a00e13
  23. archive: fix zip subdirectory root matching sibling directories GHSA-66hp-wgxq-6f5qNick Craig-Wood committed 2 months agof75008d
  24. archive: fix zip slip path traversal in untrusted zip files GHSA-66hp-wgxq-6f5q CVE-PENDINGNick Craig-Wood committed 2 months ago842430d
  25. lib/sanitize: factor untrusted path sanitization out of archive extractNick Craig-Wood committed 2 months ago2b7d0b1
  26. local: fix panic on Range request past the end of a symlink GHSA-p6m2-r3w9-mpxw CVE-PENDINGNick Craig-Wood committed 2 months ago6453374
  27. local: fix btime escaping the root via a planted symlink GHSA-f8g7-2xjc-7mfh CVE-PENDINGNick Craig-Wood committed 2 months ago215e6db
  28. local: fix dir metadata escaping the root through a planted symlink GHSA-f8g7-2xjc-7mfh CVE-PENDINGNick Craig-Wood committed 2 months ago29bb1e1
  29. serve docker: reject volume names resolving to the base directory itself GHSA-p6vx-hf7p-98j6Nick Craig-Wood committed 2 months ago142172c
  30. serve docker: re-derive volume mountpoint from name when restoring state GHSA-p6vx-hf7p-98j6Nick Craig-Wood committed 2 months agof5795d0
  31. serve docker: reject volume names that escape the base directory GHSA-p6vx-hf7p-98j6Nick Craig-Wood committed 2 months ago756b5e4
  32. serve ftp: fix auth-proxy sessions sharing credentials by username GHSA-c476-6w5q-jw77 CVE-PENDINGNick Craig-Wood committed 2 months agof6c81d7
  33. serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDINGNick Craig-Wood committed 2 months agoe8e883c
  34. serve s3: fix each server accepting the --auth-key credentials of all the othersNick Craig-Wood committed 2 months agod1e6e2f
  35. serve sftp: fix auth proxy configured via rc being silently ignored GHSA-p569-5gjg-9cmj CVE-PENDINGNick Craig-Wood committed 2 months ago65735be