deblan-mirror/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2026-03-14 14:25:52 +01:00
Code Issues Projects Releases Packages Wiki Activity
sftpgo/internal/httpd
History
Exact
Nicola Murino 2f092d1289
 fix: prevent path traversal via edge-level path normalization 
Moved path sanitization (backslash conversion and path cleaning) to
the SFTP/FTP handlers before VFS routing and permission checks.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2026-03-07 12:03:59 +01:00
..
api_admin.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_configs.go OAuth2: add PKCE 2025-12-11 08:44:38 +01:00
api_defender.go add an util method to convert []byte to string 2024-05-08 19:01:58 +02:00
api_eventrule.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_events.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_folder.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_group.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_http_user.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_iplist.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_keys.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_maintenance.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_mfa.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_quota.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_retention.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_role.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_shares.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_user.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
api_utils.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
auth_utils.go httpd: add base URL configuration 2026-01-23 19:38:02 +01:00
file.go upgrade golangci-lint to v2 2025-03-29 11:36:19 +01:00
flash.go remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
flash_test.go remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
handler.go reply to stat calls also for ongoing transfers on atomic storage backends 2026-02-16 17:54:10 +01:00
httpd.go httpd: add base URL configuration 2026-01-23 19:38:02 +01:00
httpd_test.go httpd: add base URL configuration 2026-01-23 19:38:02 +01:00
internal_test.go httpd: add base URL configuration 2026-01-23 19:38:02 +01:00
middleware.go JWT: replace jwtauth/jwx with lightweight wrapper around go-jose 2025-10-08 18:10:39 +02:00
oauth2.go OAuth2: add PKCE 2025-12-11 08:44:38 +01:00
oauth2_test.go db shared sessions: set key and type as primary key 2025-03-23 11:34:10 +01:00
oidc.go OIDC/OAuth2: increase auth state validity to 2 minutes 2025-12-20 16:58:46 +01:00
oidc_test.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
oidcmanager.go db shared sessions: set key and type as primary key 2025-03-23 11:34:10 +01:00
resetcode.go db shared sessions: set key and type as primary key 2025-03-23 11:34:10 +01:00
resources.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
resources_embedded.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
server.go jwt: increase leeway and add some tests 2025-10-11 14:14:21 +02:00
token.go db shared sessions: set key and type as primary key 2025-03-23 11:34:10 +01:00
web.go replace strings.Split with SplitSeq 2025-05-31 19:03:41 +02:00
webadmin.go OAuth2: add PKCE 2025-12-11 08:44:38 +01:00
webclient.go httpd: add base URL configuration 2026-01-23 19:38:02 +01:00
webtask.go db shared sessions: set key and type as primary key 2025-03-23 11:34:10 +01:00
webtask_test.go WebClient: refactor long-running tasks to improve browser compatibility 2024-03-11 18:19:57 +01:00