Files
Dominik Schmidt 7f7a938c3f fix(proxy): restrict JWT signed urls to the allowed HTTP methods
The legacy OC-Signature path already rejects methods outside
PRE_SIGNED_URL_ALLOWED_HTTP_METHODS, the JWT path did not. A leaked
signed download url could be used for PUT, DELETE, MOVE or PROPFIND
as the signing user for the lifetime of the signature.
2026-09-07 13:00:09 +02:00
..
2025-01-14 16:09:54 +01:00
2026-01-07 15:04:34 +01:00
2026-05-13 10:52:44 +02:00
2026-05-13 10:54:00 +02:00