ShenLin 59bd343140 fix(sharing): enforce base path boundaries ...

* fix: replace strings.HasPrefix with utils.IsSubPath for path validation

Signed-off-by: MadDogOwner <xiaoran@xrgzs.top>

* fix: re-validate shared paths to ensure they remain within the creator's base path

Signed-off-by: MadDogOwner <xiaoran@xrgzs.top>

---------

Signed-off-by: MadDogOwner <xiaoran@xrgzs.top>
Co-authored-by: MadDogOwner <xiaoran@xrgzs.top>

2026-07-10 12:24:40 +08:00

..

common

refactor(func): replace GinWithValue with GinAppendValues (#2475)

2026-05-15 17:59:53 +08:00

ftp

feat(permissions): implement fine-grained permission control (#2145)

2026-03-26 14:42:35 +08:00

handles

fix(sharing): enforce base path boundaries

2026-07-10 12:24:40 +08:00

mcp

feat(mcp): add mcp endpoint for whole openlist (#2485)

2026-06-19 00:32:00 +08:00

middlewares

refactor(func): replace GinWithValue with GinAppendValues (#2475)

2026-05-15 17:59:53 +08:00

s3

fix(upload): respect overwrite for direct uploads (#2625)

2026-06-16 14:45:43 +08:00

sftp

refactor(bootstrap): move booting logic to bootstrap package (#1773)

2025-12-15 16:47:50 +08:00

static

fix: prevent panic in unaligned 64-bit atomic (#2637)

2026-06-22 14:37:44 +08:00

webdav

feat(permissions): implement fine-grained permission control (#2145)

2026-03-26 14:42:35 +08:00

debug.go

chore: standardize context keys with custom ContextKey type (#697)

2025-07-14 23:55:17 +08:00

ftp.go

perf: replace strings.Split with strings.SplitSeq (#2441)

2026-05-04 13:05:07 +08:00

mcp.go

feat(mcp): add mcp endpoint for whole openlist (#2485)

2026-06-19 00:32:00 +08:00

router.go

feat(mcp): add mcp endpoint for whole openlist (#2485)

2026-06-19 00:32:00 +08:00

s3.go

fix(gomod): go modules with tagged versions (#499)

2025-07-01 09:54:50 +08:00

sftp.go

feat(ldap): support webdav, ftp and sftp login (#1746)

2025-12-15 16:53:38 +08:00

utils.go

feat(ldap): support webdav, ftp and sftp login (#1746)

2025-12-15 16:53:38 +08:00

webdav.go

refactor(func): replace GinWithValue with GinAppendValues (#2475)

2026-05-15 17:59:53 +08:00