Nick Craig-Wood ecd821243f http: stop a path starting with // moving the remote to another host GHSA-xqmq-v4wj-rw5m CVE-PENDING ...

The http backend resolves the path after `remote:` against the
configured url according to the URL standard. A path beginning with
`//` is a network-path reference under that standard, so a path such as
`//other.example/dir/` replaced the configured host (and port and
userinfo) rather than being treated as a path. The configured headers
were then sent to the substituted host on the initial HEAD request and
every request after it.

Use rest.URLJoinRoot, which refuses any root carrying a scheme, host
or userinfo of its own, to join the path onto the configured url.

2026-10-08 22:49:33 +01:00

..

commands

touch: parse documented timestamp formats

2026-09-09 10:24:48 +01:00

oracleobjectstorage

Version v1.75.0

2026-07-31 16:56:33 +01:00

_index.md

Add new backend dosya for dosya.dev cloud storage

2026-10-07 12:16:42 +01:00

alias.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

amazonclouddrive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

archive.md

archive: read symlinks stored in zip and squashfs archives

2026-10-08 14:15:46 +01:00

authors.md

Add 9 new contributors

2026-10-08 16:51:58 +01:00

azureblob.md

docs: azureblob: document hierarchical namespace support

2026-10-08 10:53:05 +01:00

azurefiles.md

docs: fix duplicated words in vfs and backend documentation

2026-09-05 17:53:08 +01:00

b2.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

backends.md

docs: serve backend metadata as JSON on the website

2026-04-13 16:45:00 +01:00

bisync.md

bisync: make --max-delete aware of --track-renames

2026-09-30 17:53:20 +01:00

box.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

bugs.md

docs: fix markdownlint issues md007/ul-indent md004/ul-style

2025-07-21 20:23:16 +02:00

cache.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

changelog.md

docs: update pending CVE markers

2026-10-08 11:16:10 +01:00

chunker.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

cloudinary.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

combine.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

compress.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

contact.md

docs: fix markdown lint issues in backend docs

2025-08-26 12:04:00 +02:00

crypt.md

crypt: warn about directories with legacy version-like encrypted names

2026-08-27 17:28:04 +01:00

docker.md

build: restrict the markdown languages to use for code blocks

2025-11-01 15:52:41 +01:00

docs.md

Add new backend dosya for dosya.dev cloud storage

2026-10-07 12:16:42 +01:00

doi.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

dosya.md

Add new backend dosya for dosya.dev cloud storage

2026-10-07 12:16:42 +01:00

downloads.md

docs: remove broken SecureBuild links

2026-09-21 12:26:31 +01:00

drime.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

drive.md

docs: fix formatting error in Google Drive docs

2026-10-08 17:16:24 +02:00

dropbox.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

faq.md

docs: fix formatting

2026-01-23 16:55:52 +00:00

fichier.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

filefabric.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

filelu.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

filen.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

filescom.md

filescom: document that names with / or \ in can't be stored and ignore their tests

2026-10-05 17:39:34 +01:00

filtering.md

filter: add --files-from0 to support NUL-delimited input - fixes #9537

2026-07-02 11:21:21 +01:00

flags.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

ftp.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

gofile.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

googlecloudstorage.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

googlephotos.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

gui.md

gui: clarify url param in docs

2026-09-21 14:09:21 +01:00

hasher.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

hdfs.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

hidrive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

http.md

http: stop a path starting with // moving the remote to another host GHSA-xqmq-v4wj-rw5m CVE-PENDING

2026-10-08 22:49:33 +01:00

huaweidrive.md

docs: update Huawei Drive client ID setup

2026-09-03 12:06:27 +01:00

iclouddrive.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

imagekit.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

install.md

docs: remove broken SecureBuild links

2026-09-21 12:26:31 +01:00

install.sh

install.sh: fix harmless error message on install

2023-11-28 19:10:04 +00:00

internetarchive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

internxt.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

jottacloud.md

jottacloud: support whitelabel service Phonero Sky

2026-05-14 10:53:04 +01:00

KEYS

docs: document release signing and verification

2023-09-11 12:28:23 +01:00

koofr.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

licence.md

docs: fix markdownlint issue md040/fenced-code-language

2025-07-21 20:23:16 +02:00

linkbox.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

local.md

local: limit the size of symlink targets read from .rclonelink files

2026-10-02 15:44:25 +01:00

mailru.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

mega.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

memory.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

netstorage.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

onedrive.md

onedrive: make --onedrive-delta quicker when not listing from the drive root

2026-09-23 16:04:38 +01:00

opendrive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

overview.md

docs: fix typo

2026-04-21 21:06:49 +02:00

pcloud.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

pikpak.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

pixeldrain.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

premiumizeme.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

privacy.md

docs: update privacy policy with a section on user data

2025-10-14 16:24:07 +01:00

protondrive.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

putio.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

qingstor.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

quatrix.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

rc.md

lib/http: require authentication for OPTIONS requests GHSA-gj73-fh6v-92fj CVE-PENDING

2026-10-08 22:49:33 +01:00

release_signing.md

docs: change syntax hightlighting for command examples from sh to console

2025-11-01 15:33:38 +01:00

remote_setup.md

docs: fix typo in remote setup docs

2026-06-28 23:53:05 +02:00

s3.md

s3: add RelAix.Storage provider

2026-10-06 12:23:02 +01:00

seafile.md

Version v1.75.0

2026-07-31 16:56:33 +01:00

sftp.md

docs: fix broken links and wrong s3 directory bucket flag name

2026-08-26 17:42:57 +01:00

shade.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sharefile.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sia.md

docs: fix dead links in sia and storj backends

2026-08-27 17:59:08 +02:00

smb.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sponsor.md

docs: update sponsors

2026-09-10 16:57:15 +01:00

storj.md

docs: fix dead links in sia and storj backends

2026-08-27 17:59:08 +02:00

sugarsync.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

swift.md

docs: fix duplicated words in vfs and backend documentation

2026-09-05 17:53:08 +01:00

tiers.md

docs: add tiering to the documentation - fixes #8873

2026-01-30 17:08:44 +00:00

ulozto.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

union.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

webdav.md

webdav: fix SetModTime failing and hashes missing on Nextcloud

2026-08-26 12:00:22 +01:00

yandex.md

yandex: add app_folder option to support cloud_api:disk.app_folder OAuth scope - Fixes #9848

2026-09-08 16:40:17 +01:00

zoho.md

Version v1.75.0

2026-07-31 16:56:33 +01:00