6 commits

Author	SHA1	Message	Date
Henrique Dias	64511ce45e	fix: dangling symlink, write, delete scope bugs	2026-06-23 12:35:55 +02:00
yfzhou	403d2bbd33	fix: restore ScopedFs RealPath (#5986)	2026-06-13 07:17:48 +02:00
Henrique Dias	7c2c0a11b3	refactor: ScopedFs to avoid escaping symlinks	2026-06-07 18:16:46 +02:00
Puneet Dixit	7b7ff8ae8f	fix: skip inaccessible children when listing directories (#5958)	2026-06-04 12:49:07 +02:00
Henrique Dias	3471ec2c4b	fix: incomplete fix for symlinked directories let scopes users and public-share recipients read and write files outside of scope	2026-06-04 11:02:18 +02:00
Henrique Dias	6b04cbf5e9	fix: allow writes when user scope resolves to filesystem root ... WithinScope compared targets against root+separator, which produced "//" when the scope resolved to "/". No path matched, so every write was rejected with os.ErrPermission (HTTP 403), breaking saves and uploads for root-scoped installs. Skip the appended separator when root already ends in one.	2026-06-03 15:40:26 +02:00