491bc1f8de
Merge 3759de99d9 into 0bb0ab8335
1 week ago
0bb0ab8335
fix(dbfs): thumbnail not generated for shared files ( close #3495 )
2 weeks ago
d00f447739
fix(conf): enhance environment variable parsing for configuration overrides ( close #3498 )
2 weeks ago
ef0862dcbd
chore(deps): bump golang.org/x/image from 0.38.0 to 0.41.0 ( #3488 )
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.38.0 to 0.41.0.
- [Commits](https://github.com/golang/image/compare/v0.38.0...v0.41.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.41.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
c098983dc4
chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 ( #3487 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.55.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
88498a42bd
chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.52.0 ( #3492 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.48.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.48.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 weeks ago
1c5cad6dec
fix(ssrf): implement effectiveIP function to normalize IPv4-in-IPv6 addresses
2 weeks ago
bce08f88e9
fix(router): require AdminWrite scope for URL test related routes
2 weeks ago
c278c6af39
fix(callback): validate upload callback secret ( #3497 )
2 weeks ago
7329602751
fix(dbfs): enforce storage pre allocate before creating file placeholders
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 weeks ago
7a211bceb5
fix(upload): implement chunk upload tracking and completion logic for concurrent chunk upload
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 weeks ago
aa78c4ce09
doc: add contributing guidance
3 weeks ago
b2e808e6ca
feat(explorer): add empty recycle bin button & move restore action to top quick actions ( close #3473 )
3 weeks ago
1d091c4100
fix(router): require admin write scope for test node routes
1 month ago
d4a145c3ac
Update submodule
1 month ago
332a9d8002
fix(router): require admin write scope for test node routes
1 month ago
f3347130ac
fix(middleware): improve access token validation in ViewerSessionValidation
1 month ago
83375198c8
fix(oauth): admin read scope should not be required for all authed routes ( close #3471 )
1 month ago
ba2e870bbd
feat(user): options to disable exposing user emails to other users
2 months ago
9e9fb43e72
fix(router): AdminWrite scope should be required for OneDrive OAuth callback
2 months ago
0b00dd308f
fix(sse): block subscribing to single share file
2 months ago
3607f79bb4
fix(thumb): max pixel dimensions constraint in builtin thumb generator
2 months ago
7e1289d552
fix(user): search user endpoint should only search in active users
2 months ago
7968e50429
fix(WOPI): SuggestedTarget header should not accept file path
2 months ago
26b6b1044b
doc: update security policy
2 months ago
78a731ffad
fix(route): require AdminWrite scope for thumbnail generator executable test
2 months ago
b2f0406006
chore(deps): bump github.com/aws/aws-sdk-go from 1.31.5 to 1.34.0 ( #3462 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.31.5 to 1.34.0.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Changelog](https://github.com/aws/aws-sdk-go/blob/v1.34.0/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.31.5...v1.34.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-version: 1.34.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
63fa7b4c65
chore(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 ( #3461 )
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.59.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
aaebf317a7
feat(remote download): configurable SSRF check for target URL
2 months ago
ed20843dc3
fix(oauth): scope limitation does not take effects in jwt
2 months ago
54dc81deef
update submodule
3 months ago
3487407131
fix(fts): context menu inconsistently shown items caused by missing capability bits in file traversing ( fix #3385 )
3 months ago
a9a0c1ee78
fix(fts): full-text search should not retrieve files in trash bin ( fix #3386 )
3 months ago
9792a5c84f
fix(s3): throw error is content length is missing ( fix #3394 )
3 months ago
8acc57420a
feat(ent): add index for created_at
3 months ago
c33273b36d
fix: implement orderby create_at api ( #3437 )
3 months ago
5994f7864f
chore(deps): bump golang.org/x/image from 0.18.0 to 0.38.0 ( #3403 )
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.18.0 to 0.38.0.
- [Commits](https://github.com/golang/image/compare/v0.18.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.38.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 months ago
58b83ea1e4
fix(deps): bump github.com/wneessen/go-mail from 0.7.1 to 0.7.2 ( #3372 )
...
Fix From header display name being stripped, which causes Tencent Cloud
SES to reject emails with "NotAuthenticatedSender".
4 months ago
0e19b28e81
feat: implement batch delete share service ( #3356 )
...
* feat: implement batch delete service
* refactor: implement `GetByHashIDs` to make sure only query database once
* refactor: use decode instead of `Get` before `Delete`
- fix incorrect `DeleteBatch` method (for admin) calling
- implement DeleteBatchByUserID
4 months ago
006680c5df
update submodule
5 months ago
2628c98aae
update submodule
5 months ago
457926e8cb
feat(dashboard): set global default file apps ( close cloudreve/cloudreve#2304 )
5 months ago
cb0b5d2a39
fix(dashboard): cannot delete user with OAuth grants ( close #3354 )
5 months ago
7a430058b4
fix(controller): response of AdminBatchDeleteShare ( #3350 )
5 months ago
50017060f1
fix: skip 0kb placeholder object as directory in file listing ( #3347 )
5 months ago
0f2f35d7d4
fix(dbfs): default view can be overwritten accidently ( close #3330 )
5 months ago
0be493c6e2
fix(oauth): client secret cannot be saved ( close #3337 )
5 months ago
3fd8aaa398
fix: expose aria2 udp port
5 months ago
5b823305d5
fix: typo in issue contact links
5 months ago
edf16a9ed8
misc: issue templaye syntax issue
5 months ago
Eli Ribble
Aaron Liu
dependabot[bot]
Hao Chen
Howard Yin
WittF
scholar7r
Darren Yu