Henrique Dias 4b8a8d72ce fix(storage): reject case-folded home directory collisions ... GetByScope compared scopes with a case-sensitive exact match, so on a case-insensitive filesystem two accounts whose scopes differ only in case (e.g. /users/CaseVictim and /users/casevictim) were treated as distinct even though both resolve to the same physical home directory. The second account could then read, overwrite and delete the first account's files. Match the scope case-insensitively so the collision check performed during signup, proxy and hook provisioning catches these aliases and rejects the duplicate. Refs GHSA-576v-w77m-gr84		2026-07-25 08:16:18 +02:00
..
bolt	fix(storage): reject case-folded home directory collisions	2026-07-25 08:16:18 +02:00
storage.go	feat: allow to password protect shares (#1252)	2021-03-02 12:00:18 +01:00