5da9d74da6
fix: allow CSP inline styling
2022-05-05 15:38:39 +00:00
c3bd1188aa
fix: expired token error
2022-05-04 12:58:19 +00:00
7c9a75e725
build(backend): bump dependency versions
2022-05-04 01:00:42 +04:00
bcef7d3f73
chore: make linter happy
2022-04-30 13:49:33 +04:00
6366cf0b18
fix: display user scope for admin users ( #1834 )
2022-02-22 10:58:22 +01:00
c782f21b0f
fix: correctly handle non-ascii passwords for shared resources
2022-02-21 20:47:28 +01:00
0942fc7042
fix: don't expose scope for non-admin users
2022-02-21 20:17:42 +01:00
c1987237d0
feat: use real image path to calculate cache key
2022-02-21 19:59:22 +01:00
8888b9f446
feat: add gallery view mode
2022-02-10 17:11:24 +01:00
6eb3ab0635
fix: upgrade vulnerable versions of the library
2021-12-21 00:17:26 +01:00
f81857acce
build: refactor makefile
2021-12-20 23:36:50 +01:00
74b7cd8e81
fix: security issue in command runner ( closes #1621 )
2021-10-31 17:13:16 +01:00
0426629a59
feat: add ability to select file modified time format ( #1536 )
2021-09-11 14:12:51 +02:00
0358e42d2c
feat: add manifest theme color param ( #1542 )
2021-09-10 17:08:15 +02:00
4c3099a086
fix: internal server error if --disable-preview-resize flag is set ( closes #1510 )
2021-08-23 10:03:11 +02:00
23d646c456
fix: escape quote on index template
...
fixes #1501
2021-08-20 14:43:06 +02:00
c63cc5a2d2
fix: file caching directive
2021-08-20 14:43:06 +02:00
34d7d2c8c4
chore: upgrade golangci-lint
2021-07-26 12:00:05 +02:00
201329abce
chore: add Content-Security-Policy header
2021-07-26 11:08:39 +02:00
f2b5dd3787
chore: don't break folder download if any file processing causes an error
2021-07-26 10:41:56 +02:00
5072bbb2cb
fix: break resource create/update handlers on error ( closes #1464 )
2021-07-24 15:33:54 +02:00
6b19ab6613
fix: don't remove files on unsuccessful updates ( closes #1456 )
2021-07-24 15:32:24 +02:00
209f9fa77f
fix: omit file content
2021-04-23 12:04:02 +00:00
aa172b8bb5
feat: gzip encoding for static js files
2021-04-22 12:48:45 +00:00
4711e7bcd5
chore: set public path on the fly
2021-04-20 19:51:10 +00:00
8a47aee137
chore: split preview creation logic
2021-04-19 13:16:48 +00:00
190cb99a79
feat: browser cache directives
2021-04-19 12:49:40 +00:00
b92152693f
chore: split action on resource patch handler
2021-04-16 12:04:06 +00:00
7ec24d9d77
feat: support for IE11 browser
2021-04-15 12:28:19 +00:00
8973c4598f
fix: delete image cache when moving
2021-04-14 15:20:38 +00:00
2697093ac1
fix: empty archive name on directory download
2021-03-26 14:45:18 +00:00
59f9964e80
fix: check modify permission on file overwrite
2021-03-26 13:30:14 +00:00
e1a6f593e1
fix: error causes panic on upload
2021-03-23 13:13:46 +00:00
a721dc1f31
feat: add health check handler
2021-03-21 12:30:48 +01:00
93a35ad251
fix: prefix handling on http router
2021-03-17 17:54:25 +00:00
426b38bb33
fix: root path name on archive
2021-03-12 15:52:52 +00:00
e017a19985
fix: full file path on share
2021-03-12 12:14:58 +00:00
5bf15548d0
fix: check rules on http resource handlers
2021-03-10 17:38:11 +00:00
81b6f4d6f6
fix: update image cache when replacing
2021-03-10 15:14:01 +00:00
0b92d94570
chore: split POST method on resource http handler
2021-03-10 13:32:11 +00:00
54f35701a2
fix: archive contains parent path on Windows
2021-03-09 15:54:54 +00:00
fc5506179a
refactor: migrate from rice to embed.FS
2021-03-09 19:09:32 +01:00
1819377897
feat: improved sharing prompt
2021-02-16 15:39:11 +00:00
23f84642e6
build: use make for building the project ( #1304 )
2021-03-04 00:10:08 +01:00
d8f415f8ab
feat: allow to password protect shares ( #1252 )
...
This changes allows to password protect shares. It works by:
* Allowing to optionally pass a password when creating a share
* If set, the password + salt that is configured via a new flag will be
hashed via bcrypt and the hash stored together with the rest of the
share
* Additionally, a random 96 byte long token gets generated and stored
as part of the share
* When the backend retrieves an unauthenticated request for a share that
has authentication configured, it will return a http 401
* The frontend detects this and will show a login prompt
* The actual download links are protected via an url arg that contains
the previously generated token. This allows us to avoid buffering the
download in the browser and allows pasting the link without breaking
it
2021-03-02 12:00:18 +01:00
019ce80fc5
fix: don't allow to remove root user
2021-01-11 22:33:36 +01:00
6914063853
feat: allow disabling file detections by reading header ( #1175 )
2021-01-07 11:30:17 +01:00
fb5b28d9cb
feat: download shared subdirectory ( #1184 )
...
Co-authored-by: Oleg Lobanov <oleg@lobanov.me>
2020-12-28 17:35:29 +01:00
677bce376b
feat: add sharing management ( #1178 ) ( closes #1000 )
2020-12-24 19:02:28 +01:00
f62806f6c9
fix: check user input to prevent permission elevation ( #1196 ) ( closes #1195 )
2020-12-24 18:22:48 +01:00
Ramires Viana