Harsh Raj Singhania 14a1359c96 serve webdav: escape filename in zip download Content-Disposition header ...

Use mime.FormatMediaType instead of unescaped string concatenation so a
directory name containing a double quote cannot inject extra disposition
parameters.

Fixes #9962

2026-09-25 17:09:33 +01:00

..

dlna

serve dlna: log unescaped paths - fixes #7370

2026-09-21 18:11:07 +01:00

docker

serve docker: fix volume path being lost when the plugin restarts

2026-09-08 17:05:23 +01:00

ftp

serve ftp: fix VFS leak when the server fails to start

2026-09-08 10:28:54 +01:00

http

serve http: escape filename in zip download Content-Disposition header

2026-09-25 17:09:33 +01:00

nfs

serve: fix VFS instance leaks on server startup failures and shutdown

2026-08-18 09:03:12 +01:00

proxy

serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDING

2026-09-04 19:00:22 +01:00

restic

serve restic: prevent concurrent append-only overwrites

2026-09-19 10:16:32 +01:00

s3

serve s3: fix CopyObject of a missing object not returning NoSuchKey

2026-09-24 10:36:10 +01:00

servetest

serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDING

2026-09-04 19:00:22 +01:00

sftp

serve sftp: fix auth proxy configured via rc being silently ignored GHSA-p569-5gjg-9cmj CVE-PENDING

2026-09-04 19:00:22 +01:00

webdav

serve webdav: escape filename in zip download Content-Disposition header

2026-09-25 17:09:33 +01:00

rc_test.go

serve: update serve remote control to use ParseOptions

2026-07-29 19:42:45 +01:00

rc.go

serve: update serve remote control to use ParseOptions

2026-07-29 19:42:45 +01:00

serve.go

http: add basic metadata and provide it via serve

2025-11-17 16:52:30 +00:00