Code

History

Commits on master to lib35+
  1. rest: add SameHost and check HTTPS downgrades against the original request GHSA-486v-q2wf-fp2r CVE-PENDINGNick Craig-Wood committed 2 months ago31a8164
  2. lib/sanitize: factor untrusted path sanitization out of archive extractNick Craig-Wood committed 2 months ago2b7d0b1
  3. rest: fix retries reading the request body after the request has finishedNick Craig-Wood committed 2 months agoa18d9a6
  4. readers: add NoCloserNotify to find out when a request body has been closedNick Craig-Wood committed 2 months ago7744f98
  5. readers: make NoCloser pass through WriteTo so io.Copy keeps its fast pathNick Craig-Wood committed 2 months ago6c84963
  6. filepool: add generic file handle pool in lib/filepoolSplainte committed 2 months ago613b335
  7. pool: return an error instead of panicking when an RW is used after CloseNick Craig-Wood committed 2 months ago55fa9b6
  8. serve http: prevent scrolling to the top on page reload - fixes #9771Sune Mølgaard committed 2 months agobdeb95a
  9. lib/rest: make ParseContentRange publicNick Craig-Wood committed 2 months ago2a8d8af
  10. build: modernize with "go fix -minmax": use min and max builtinsNick Craig-Wood committed 2 months agob5bea68
  11. lib/transform: fix panic in truncate_keep_extensionVXNCXNX committed 2 months agoc667e53
  12. lib/rest: validate ranged responsesMorax committed 3 months ago69e5aff
  13. multipart: fix chunked uploads storing truncated objects when the source ends earlyNick Craig-Wood committed 3 months ago5b7cc09
  14. lib/batcher: prevent commits racing shutdown - fixes #9687Loi Nguyen committed 3 months ago7f6207f
  15. serve: pass the client IP address to the auth proxy - fixes #4499am-at-enrollvb committed 3 months ago5dd3427
  16. Version v1.75.0Nick Craig-Wood committed 3 months ago9ee9d0a
  17. lib/http: use TLS on all --addr listeners when --cert and --key are set GHSA-mfvx-7rcj-9m5gNick Craig-Wood committed 3 months ago043e58b
  18. lib/proxy: fix unbounded HTTP CONNECT headers causing OOM GHSA-xhf4-832v-7xcr CVE-PENDINGNick Craig-Wood committed 3 months ago21d8cd3
  19. webdav: fix HTTPS to HTTP redirects leaking credentials GHSA-h4mf-4v27-hggjNick Craig-Wood committed 4 months ago59b513b
  20. http: add Prefer to CORS Access-Control-Allow-Headers headersijie-Z committed 3 months ago31604f6
  21. fs: fix passwords and tokens appearing in the debug log during rclone configNick Craig-Wood committed 3 months ago8b812ff
  22. drive, googlephotos: warn in config wizard before using the shared client_id #9580Nick Craig-Wood committed 4 months agob5a81da
  23. drive, googlephotos: warn when using rclone's shared client_id #9580Nick Craig-Wood committed 4 months agod03eb58
  24. fs: fix negative offset when a suffix Range request exceeds object sizeAmit Mishra committed 4 months agocb41e42
  25. rc: include OAuth authorization URL in rc config/oauthstatus responseHakan İSMAİL committed 5 months agof283221
  26. rc: add config/oauthstop and config/oauthstatus to control oauth listenerFTCHD committed 5 months ago35b95aa
  27. lib/http: replace deprecated h2c.NewHandler with http.Server.ProtocolsNick Craig-Wood committed 5 months agoad8a108
  28. serve: support custom http response headerskkocdko committed 6 months agod86b72c
  29. oauthutil: clarify token replacement prompt wordingKTibow committed 6 months ago7200e37
  30. Version v1.74.0Nick Craig-Wood committed 6 months agoaa031c5
  31. docs: fix code comment regarding cmount tagalbertony committed 6 months agof1a5e44
  32. lib/http: Add HTTP/2 cleartext support in server configurationTheBabu committed 7 months agoe863f75
  33. lib/rest: fix URLPathEscapeAll breaking WebDAV servers (eg nzbdav) with strict path matchingAndrew Furman committed 8 months ago639bd88
  34. operations: add method to real time account server side copyNick Craig-Wood committed 9 months ago307f1ed
  35. serve http: add gzip compressionLeon Brocard committed 8 months ago9be4fc8