Henrique Dias 4b8a8d72ce fix(storage): reject case-folded home directory collisions ... GetByScope compared scopes with a case-sensitive exact match, so on a case-insensitive filesystem two accounts whose scopes differ only in case (e.g. /users/CaseVictim and /users/casevictim) were treated as distinct even though both resolve to the same physical home directory. The second account could then read, overwrite and delete the first account's files. Match the scope case-insensitively so the collision check performed during signup, proxy and hook provisioning catches these aliases and rejects the duplicate. Refs GHSA-576v-w77m-gr84		2026-07-25 08:16:18 +02:00
..
auth.go	refactor: cleanup package names (#5605)	2025-12-06 10:52:11 +01:00
bolt.go	chore: fix golangci-lint errors	2024-04-01 18:24:06 +02:00
config.go	build(backend): bump dependency versions	2022-05-04 01:00:42 +04:00
share.go	fix(share): delete exact directory share on trailing-slash delete (GHSA-pp88-jhwj-5qh5)	2026-06-27 09:08:57 +02:00
share_test.go	fix(share): delete exact directory share on trailing-slash delete (GHSA-pp88-jhwj-5qh5)	2026-06-27 09:08:57 +02:00
users.go	fix(storage): reject case-folded home directory collisions	2026-07-25 08:16:18 +02:00
utils.go	refactor: cleanup package names (#5605)	2025-12-06 10:52:11 +01:00