From 291223b3cefe1e50fae8f73d70464b1dc25351a4 Mon Sep 17 00:00:00 2001 From: Henrique Dias Date: Tue, 11 Nov 2025 08:06:16 +0100 Subject: [PATCH 001/157] Merge commit from fork --- http/share.go | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/http/share.go b/http/share.go index e1036d2a..d968c05b 100644 --- a/http/share.go +++ b/http/share.go @@ -77,7 +77,16 @@ var shareDeleteHandler = withPermShare(func(_ http.ResponseWriter, r *http.Reque return http.StatusBadRequest, nil } - err := d.store.Share.Delete(hash) + link, err := d.store.Share.GetByHash(hash) + if err != nil { + return errToStatus(err), err + } + + if link.UserID != d.user.ID && !d.user.Perm.Admin { + return http.StatusForbidden, nil + } + + err = d.store.Share.Delete(hash) return errToStatus(err), err }) From 6950c2e4d2868f06235f93c0a18b303b4095ca0a Mon Sep 17 00:00:00 2001 From: Jagadam Dinesh Reddy Date: Tue, 11 Nov 2025 12:39:19 +0530 Subject: [PATCH 002/157] fix: share page preview items to contain baseUrl (#5510) Co-authored-by: jagadam97 --- .../src/components/settings/AceEditorTheme.vue | 6 +++++- frontend/src/views/Share.vue | 15 ++++++--------- 2 files changed, 11 insertions(+), 10 deletions(-) diff --git a/frontend/src/components/settings/AceEditorTheme.vue b/frontend/src/components/settings/AceEditorTheme.vue index 09efe48b..68585a3a 100644 --- a/frontend/src/components/settings/AceEditorTheme.vue +++ b/frontend/src/components/settings/AceEditorTheme.vue @@ -1,5 +1,9 @@