Nick Craig-Wood 4bb6a1edf6 rc: require authentication to list the remotes with --rc-serve GHSA-mfvx-7rcj-9m5g ...

With --rc-serve set the root listing enumerated the names of all configured
remotes without any authentication.

Make the root listing obey the same fail-closed rule as the rest of
the rc endpoints: it now requires authentication to be configured or
an explicit opt out with --rc-no-auth.

Addresses GHSA-mfvx-7rcj-9m5g finding 2.

2026-07-31 13:21:59 +01:00

..

jobs

rc: fix leaking stack traces on panics GHSA-gwfq-86j8-7qhv

2026-07-31 13:21:59 +01:00

js

docs: fix various markdownlint issues

2025-11-01 18:54:19 +01:00

rcflags

rc: convert options to new style

2024-07-15 11:09:54 +01:00

rcserver

rc: require authentication to list the remotes with --rc-serve GHSA-mfvx-7rcj-9m5g

2026-07-31 13:21:59 +01:00

webgui

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00

cache_test.go

fs/cache: fix parent not getting pinned when remote is a file

2024-09-28 13:49:56 +01:00

cache.go

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00

config_test.go

rc: add option blocks parameter to options/get and options/info

2024-07-16 15:02:50 +01:00

config.go

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00

context_test.go

fs/rc: add ParseOptions and CheckParamsUsed unified options helpers

2026-07-29 19:42:45 +01:00

context.go

fs/rc: add ParseOptions and CheckParamsUsed unified options helpers

2026-07-29 19:42:45 +01:00

disks_unsupported.go

rc: add core/disks to enumerate attached disks

2026-04-23 18:47:46 +01:00

disks.go

rc: add core/disks to enumerate attached disks

2026-04-23 18:47:46 +01:00

internal_job_test.go

rc: make sure fatal errors don't crash rclone - fixes #8955

2025-11-12 12:22:04 +00:00

internal_test.go

rc: add core/disks to enumerate attached disks

2026-04-23 18:47:46 +01:00

internal.go

rc: add user directories to core/disks and filter mounts better

2026-04-27 15:07:33 +01:00

params_test.go

build: modernize Go usage

2025-02-28 11:31:14 +00:00

params.go

build: modernize Go usage

2025-02-28 11:31:14 +00:00

rc_test.go

fs/rc: add more infrastructure to help writing rc functions

2018-11-02 17:32:20 +00:00

rc.go

rc: remove duplicate metrics_addr option registration

2026-05-11 16:34:45 +01:00

registry.go

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00