rclone

mirror of https://github.com/rclone/rclone.git synced 2026-05-12 10:03:35 -04:00

Files

Nick Craig-Wood f191448b0d rc: flip auth default so all endpoints require auth unless opted out

Replace AuthRequired bool with NoAuth bool on the rc.Call struct and
flip the auth check logic. Previously endpoints were unauthenticated
by default and had to opt in with AuthRequired: true, which led to
security vulnerabilities when developers forgot to set the flag.

Now all endpoints require authentication by default. Only explicitly
safe read-only endpoints are marked with NoAuth: true:

- rc/noop
- rc/error
- rc/list
- core/version
- core/stats
- core/group-list
- core/transferred
- core/du
- cache/stats
- vfs/list
- vfs/stats
- vfs/queue
- job/status
- job/list

See GHSA-25qr-6mpr-f7qx, GHSA-jfwf-28xr-xw6q

2026-04-19 13:31:27 +01:00

dlna

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

docker

docs: change syntax hightlighting for command examples from sh to console

2025-11-01 15:33:38 +01:00

ftp

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

http

vfs: add context parameter to New() for config propagation