Mirrors/filebrowser
1
0
Fork 0
mirror of https://github.com/filebrowser/filebrowser.git synced 2026-07-17 16:36:49 +00:00
Code Issues Projects Releases Wiki Activity

fix: cross-user unauthorized share-link deletion

Browse source
This commit is contained in:
Henrique Dias 2026-06-03 10:31:44 +02:00
parent e07c59df0b
commit 0231b7ebdf
No known key found for this signature in database
5 changed files with 117 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
share/storage.go
View file

@ -15,7 +15,7 @@ type StorageBackend interface {
Gets(path string, id uint) ([]*Link, error)
Save(s *Link) error
Delete(hash string) error
DeleteWithPathPrefix(path string) error
DeleteWithPathPrefix(path string, userID uint) error
}
// Storage is a storage.
@ -137,6 +137,6 @@ func (s *Storage) Delete(hash string) error {
return s.back.Delete(hash)
}
func (s *Storage) DeleteWithPathPrefix(path string) error {
return s.back.DeleteWithPathPrefix(path)
func (s *Storage) DeleteWithPathPrefix(path string, userID uint) error {
return s.back.DeleteWithPathPrefix(path, userID)
}

2
share/storage_test.go
View file

@ -59,7 +59,7 @@ func (f fakeBackend) Delete(_ string) error {
return nil
}
func (f fakeBackend) DeleteWithPathPrefix(_ string) error {
func (f fakeBackend) DeleteWithPathPrefix(_ string, _ uint) error {
return nil
}