Suyunjing 9cc5dd969b fix(offline_download): block SimpleHttp temp file path traversal via strict filename sanitization ...

* fix(offline_download): prevent path traversal

* fix(SimpleHttp): improve filename validation

* fix(offline_download): harden SimpleHttp filename and temp path checks

* simplify filename validation

---------

Co-authored-by: ILoveScratch2 <ilovescratch@foxmail.com>
Co-authored-by: j2rong4cn <j2rong@qq.com>

2026-05-27 17:18:31 +08:00

..

archive

perf: replace strings.Split with strings.SplitSeq (#2441)

2026-05-04 13:05:07 +08:00

authn

chore: standardize context keys with custom ContextKey type (#697)

2025-07-14 23:55:17 +08:00

bootstrap

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

cache

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

conf

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

db

fix(setting): handle delete of setting item with empty key (#2131)

2026-05-14 23:23:44 +08:00

driver

feat(drivers/webdav): add support for 302 redirects (#1952)

2026-01-11 15:15:42 +08:00

errs

fix(internal/fs): add ObjectAlreadyExists error check (#2019)

2026-05-03 19:10:31 +08:00

fs

feat(permissions): implement fine-grained permission control (#2145)

2026-03-26 14:42:35 +08:00

fuse

chore: add fuse package

2022-07-20 00:39:20 +08:00

hybrid_cache

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

mem

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

message

fix(gomod): go modules with tagged versions (#499)

2025-07-01 09:54:50 +08:00

model

refactor: unify stream caching via HybridCache (#2460)

2026-05-14 22:14:54 +08:00

net

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

offline_download

fix(offline_download): block SimpleHttp temp file path traversal via strict filename sanitization

2026-05-27 17:18:31 +08:00

op

perf: replace strings.Split with strings.SplitSeq (#2441)

2026-05-04 13:05:07 +08:00

search

fix(search): fix duplicated variable init (#1703)

2025-11-25 12:23:25 +08:00

setting

feat(fs): support manually trigger objs update hook (#1620)

2025-11-21 12:18:20 +08:00

sharing

feat(share): support more secure file sharing (#991)

2025-08-19 15:10:02 +08:00

sign

fix(gomod): go modules with tagged versions (#499)

2025-07-01 09:54:50 +08:00

stream

refactor(cache)!: extract hybrid_cache package (#2477)

2026-05-18 15:11:39 +08:00

task

feat(model): add object mask support and enhance cache/task handling (#1743)

2025-12-11 15:10:42 +08:00

task_group

feat(model): add object mask support and enhance cache/task handling (#1743)

2025-12-11 15:10:42 +08:00