Nicola Murino 2f092d1289 fix: prevent path traversal via edge-level path normalization ... Moved path sanitization (backslash conversion and path cleaning) to the SFTP/FTP handlers before VFS routing and permission checks. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>		2026-03-07 12:03:59 +01:00
..
api_admin.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_configs.go	OAuth2: add PKCE	2025-12-11 08:44:38 +01:00
api_defender.go	add an util method to convert []byte to string	2024-05-08 19:01:58 +02:00
api_eventrule.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_events.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_folder.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_group.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_http_user.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_iplist.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_keys.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_maintenance.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_mfa.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_quota.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_retention.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_role.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_shares.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_user.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
api_utils.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
auth_utils.go	httpd: add base URL configuration	2026-01-23 19:38:02 +01:00
file.go	upgrade golangci-lint to v2	2025-03-29 11:36:19 +01:00
flash.go	remove end year from Copyright notice in files	2024-01-01 11:31:45 +01:00
flash_test.go	remove end year from Copyright notice in files	2024-01-01 11:31:45 +01:00
handler.go	reply to stat calls also for ongoing transfers on atomic storage backends	2026-02-16 17:54:10 +01:00
httpd.go	httpd: add base URL configuration	2026-01-23 19:38:02 +01:00
httpd_test.go	httpd: add base URL configuration	2026-01-23 19:38:02 +01:00
internal_test.go	httpd: add base URL configuration	2026-01-23 19:38:02 +01:00
middleware.go	JWT: replace jwtauth/jwx with lightweight wrapper around go-jose	2025-10-08 18:10:39 +02:00
oauth2.go	OAuth2: add PKCE	2025-12-11 08:44:38 +01:00
oauth2_test.go	db shared sessions: set key and type as primary key	2025-03-23 11:34:10 +01:00
oidc.go	OIDC/OAuth2: increase auth state validity to 2 minutes	2025-12-20 16:58:46 +01:00
oidc_test.go	fix: prevent path traversal via edge-level path normalization	2026-03-07 12:03:59 +01:00
oidcmanager.go	db shared sessions: set key and type as primary key	2025-03-23 11:34:10 +01:00
resetcode.go	db shared sessions: set key and type as primary key	2025-03-23 11:34:10 +01:00
resources.go	remove obsoletes build constraints	2025-04-20 17:15:40 +02:00
resources_embedded.go	remove obsoletes build constraints	2025-04-20 17:15:40 +02:00
server.go	jwt: increase leeway and add some tests	2025-10-11 14:14:21 +02:00
token.go	db shared sessions: set key and type as primary key	2025-03-23 11:34:10 +01:00
web.go	replace strings.Split with SplitSeq	2025-05-31 19:03:41 +02:00
webadmin.go	OAuth2: add PKCE	2025-12-11 08:44:38 +01:00
webclient.go	httpd: add base URL configuration	2026-01-23 19:38:02 +01:00
webtask.go	db shared sessions: set key and type as primary key	2025-03-23 11:34:10 +01:00
webtask_test.go	WebClient: refactor long-running tasks to improve browser compatibility	2024-03-11 18:19:57 +01:00