a700792cb8
Merge e4a0e888b5 into 1c3fe4da3c
7 days ago
1c3fe4da3c
fix #3537 : feat(webdav): implement copy and move operations with overwrite handling and tests
7 days ago
78994b9719
fix(admin): validate user credentials ( fix #3563 )
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
7 days ago
65f8c3f3ed
chore: update Go version to 1.26.5 and improve error handling in remote client
1 week ago
e4a0e888b5
Update share_navigator.go
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
1 month ago
e18785a9ca
fix: revalidate share and direct links after permission changes
...
Revalidate existing share links against the owner's current status and group permissions.
Reject redirected direct links when the owner's current group disables direct links.
Refresh restored share navigator state before serving cached paths.
Prevent client-side redirect caching and add regression coverage for restricted owners.
Co-authored-by: Codex <codex@openai.com>
1 month ago
20c95ad73f
fix(upload): set concurrent chunk upload to 1 when disk pre-allocation is disabled ( #3501 )
...
* fix(upload): set concurrent chunk upload to 1 when disk pre-allocation is disabled
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
1 month ago
0bb0ab8335
fix(dbfs): thumbnail not generated for shared files ( close #3495 )
2 months ago
d00f447739
fix(conf): enhance environment variable parsing for configuration overrides ( close #3498 )
2 months ago
ef0862dcbd
chore(deps): bump golang.org/x/image from 0.38.0 to 0.41.0 ( #3488 )
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.38.0 to 0.41.0.
- [Commits](https://github.com/golang/image/compare/v0.38.0...v0.41.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.41.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
c098983dc4
chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 ( #3487 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.55.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
88498a42bd
chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.52.0 ( #3492 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.48.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.48.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
1c5cad6dec
fix(ssrf): implement effectiveIP function to normalize IPv4-in-IPv6 addresses
2 months ago
bce08f88e9
fix(router): require AdminWrite scope for URL test related routes
2 months ago
c278c6af39
fix(callback): validate upload callback secret ( #3497 )
2 months ago
7329602751
fix(dbfs): enforce storage pre allocate before creating file placeholders
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
7a211bceb5
fix(upload): implement chunk upload tracking and completion logic for concurrent chunk upload
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
aa78c4ce09
doc: add contributing guidance
2 months ago
b2e808e6ca
feat(explorer): add empty recycle bin button & move restore action to top quick actions ( close #3473 )
2 months ago
1d091c4100
fix(router): require admin write scope for test node routes
3 months ago
d4a145c3ac
Update submodule
3 months ago
332a9d8002
fix(router): require admin write scope for test node routes
3 months ago
f3347130ac
fix(middleware): improve access token validation in ViewerSessionValidation
3 months ago
83375198c8
fix(oauth): admin read scope should not be required for all authed routes ( close #3471 )
3 months ago
ba2e870bbd
feat(user): options to disable exposing user emails to other users
3 months ago
9e9fb43e72
fix(router): AdminWrite scope should be required for OneDrive OAuth callback
3 months ago
0b00dd308f
fix(sse): block subscribing to single share file
3 months ago
3607f79bb4
fix(thumb): max pixel dimensions constraint in builtin thumb generator
3 months ago
7e1289d552
fix(user): search user endpoint should only search in active users
3 months ago
7968e50429
fix(WOPI): SuggestedTarget header should not accept file path
3 months ago
26b6b1044b
doc: update security policy
3 months ago
78a731ffad
fix(route): require AdminWrite scope for thumbnail generator executable test
3 months ago
b2f0406006
chore(deps): bump github.com/aws/aws-sdk-go from 1.31.5 to 1.34.0 ( #3462 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.31.5 to 1.34.0.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Changelog](https://github.com/aws/aws-sdk-go/blob/v1.34.0/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.31.5...v1.34.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-version: 1.34.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 months ago
63fa7b4c65
chore(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 ( #3461 )
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.59.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 months ago
aaebf317a7
feat(remote download): configurable SSRF check for target URL
3 months ago
ed20843dc3
fix(oauth): scope limitation does not take effects in jwt
3 months ago
54dc81deef
update submodule
4 months ago
3487407131
fix(fts): context menu inconsistently shown items caused by missing capability bits in file traversing ( fix #3385 )
4 months ago
a9a0c1ee78
fix(fts): full-text search should not retrieve files in trash bin ( fix #3386 )
4 months ago
9792a5c84f
fix(s3): throw error is content length is missing ( fix #3394 )
4 months ago
8acc57420a
feat(ent): add index for created_at
4 months ago
c33273b36d
fix: implement orderby create_at api ( #3437 )
4 months ago
5994f7864f
chore(deps): bump golang.org/x/image from 0.18.0 to 0.38.0 ( #3403 )
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.18.0 to 0.38.0.
- [Commits](https://github.com/golang/image/compare/v0.18.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.38.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
5 months ago
58b83ea1e4
fix(deps): bump github.com/wneessen/go-mail from 0.7.1 to 0.7.2 ( #3372 )
...
Fix From header display name being stripped, which causes Tencent Cloud
SES to reject emails with "NotAuthenticatedSender".
6 months ago
0e19b28e81
feat: implement batch delete share service ( #3356 )
...
* feat: implement batch delete service
* refactor: implement `GetByHashIDs` to make sure only query database once
* refactor: use decode instead of `Get` before `Delete`
- fix incorrect `DeleteBatch` method (for admin) calling
- implement DeleteBatchByUserID
6 months ago
006680c5df
update submodule
6 months ago
2628c98aae
update submodule
6 months ago
457926e8cb
feat(dashboard): set global default file apps ( close cloudreve/cloudreve#2304 )
6 months ago
cb0b5d2a39
fix(dashboard): cannot delete user with OAuth grants ( close #3354 )
6 months ago
7a430058b4
fix(controller): response of AdminBatchDeleteShare ( #3350 )
6 months ago
Darren Yu
Aaron Liu
dependabot[bot]
Hao Chen
Howard Yin
WittF
scholar7r