filebrowser/storage/bolt
Henrique Dias f30fca636c
fix(share): delete exact directory share on trailing-slash delete (GHSA-pp88-jhwj-5qh5)
DeleteWithPathPrefix queried the share index with the raw path, so deleting a
directory through a trailing-slash path (e.g. DELETE /api/resources/a/) only
matched descendants like /a/child and missed the exact /a share, leaving it in
storage. If the same path was later recreated, the stale public share re-exposed
the new content. Normalize the path before the prefix query so the exact share
and its descendants are both removed. Adds a regression test.
2026-06-27 09:08:57 +02:00
..
auth.go refactor: cleanup package names (#5605) 2025-12-06 10:52:11 +01:00
bolt.go chore: fix golangci-lint errors 2024-04-01 18:24:06 +02:00
config.go build(backend): bump dependency versions 2022-05-04 01:00:42 +04:00
share.go fix(share): delete exact directory share on trailing-slash delete (GHSA-pp88-jhwj-5qh5) 2026-06-27 09:08:57 +02:00
share_test.go fix(share): delete exact directory share on trailing-slash delete (GHSA-pp88-jhwj-5qh5) 2026-06-27 09:08:57 +02:00
users.go fix(auth): reject signup when normalized home dir collides (GHSA-7rc3-g7h6-22m7) 2026-06-27 09:08:56 +02:00
utils.go refactor: cleanup package names (#5605) 2025-12-06 10:52:11 +01:00