Harsh Raj Singhania a755455609 serve webdav: escape filename in zip download Content-Disposition header ...

Use mime.FormatMediaType instead of unescaped string concatenation so a
directory name containing a double quote cannot inject extra disposition
parameters.

Fixes #9962

(cherry picked from commit 14a1359c96)

2026-10-08 17:17:11 +01:00

..

dlna

serve dlna: log unescaped paths - fixes #7370

2026-10-08 17:17:11 +01:00

docker

serve docker: fix volume path being lost when the plugin restarts

2026-10-08 17:17:10 +01:00

ftp

serve ftp: fix VFS leak when the server fails to start

2026-10-08 17:17:09 +01:00

http

serve http: escape filename in zip download Content-Disposition header

2026-10-08 17:17:11 +01:00

nfs

serve: fix VFS instance leaks on server startup failures and shutdown

2026-09-04 16:39:12 +01:00

proxy

serve s3: fix auth proxy accepting any request signed with an empty secret GHSA-xwwr-4h3p-r22c CVE-PENDING

2026-09-04 16:18:19 +01:00

restic

serve restic: prevent concurrent append-only overwrites

2026-10-08 17:17:10 +01:00

s3

serve s3: fix CopyObject of a missing object not returning NoSuchKey

2026-10-08 17:17:11 +01:00

servetest

serve, mountlib: test VFS release on shutdown and mount failure

2026-10-08 17:17:09 +01:00

sftp

serve: fix VFS instance leaks on server startup failures and shutdown

2026-09-04 16:39:12 +01:00

webdav

serve webdav: escape filename in zip download Content-Disposition header

2026-10-08 17:17:11 +01:00

rc_test.go

serve: update serve remote control to use ParseOptions

2026-07-29 19:42:45 +01:00

rc.go

serve: update serve remote control to use ParseOptions

2026-07-29 19:42:45 +01:00

serve.go

http: add basic metadata and provide it via serve

2025-11-17 16:52:30 +00:00