No description
Find a file
2026-07-27 21:50:03 +02:00
.claude docs: update CLAUDE.md 2026-07-26 09:58:40 +02:00
.github docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
auth fix(users): make the provisioned scope check atomic with the save 2026-07-25 22:15:27 +02:00
branding docs: import logo and banner (#5514) 2025-11-11 18:32:41 +01:00
cmd docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
diskcache chore: add govet, gocritic and revive 2025-11-20 07:56:56 +01:00
docker fix: add tokenExpirationTime to config init and troubleshoot docs (#5546) 2025-11-17 08:57:02 +01:00
docs docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
errors fix: check download permission when sharing permission is enabled (#5875) 2026-04-04 09:11:21 +02:00
files fix(http): canonicalize paths before checking access rules (#6045) 2026-07-26 10:00:18 +02:00
fileutils fix: return error instead of panicking on an unreadable directory during copy (#6020) 2026-07-18 07:21:44 +02:00
frontend docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
http fix: enforce rules on recursive operations and expired proxy tokens (#6053) 2026-07-27 17:16:58 +02:00
img chore: remove 'nolint' comments 2025-11-15 09:01:21 +01:00
rules fix(http): canonicalize paths before checking access rules (#6045) 2026-07-26 10:00:18 +02:00
runner chore: remove 'nolint' comments 2025-11-15 09:01:21 +01:00
search feat: support streaming response for search results (#5630) 2025-12-28 21:57:25 +01:00
settings fix(http): canonicalize paths before checking access rules (#6045) 2026-07-26 10:00:18 +02:00
share fix: match admin share paths by owner scope (#5992) 2026-06-27 07:43:22 +02:00
storage test(storage): cover case-insensitive GetByScope matching 2026-07-25 08:16:18 +02:00
users test(users): cover concurrent provisioning into one scope 2026-07-25 22:15:35 +02:00
version fix: ignore version.go 2026-02-14 07:35:34 +01:00
.dockerignore build: publish docs to cloudflare pages (#5230) 2025-06-28 22:20:26 +02:00
.gitignore chore: remove unused tests 2025-11-13 14:21:11 +01:00
.golangci.yml chore: add govet, gocritic and revive 2025-11-20 07:56:56 +01:00
.goreleaser.yml chore: add openbsd, remove windows arm (#5695) 2026-01-18 08:59:57 +01:00
.versionrc chore: replace release-please with commit-and-tag-version 2025-11-13 14:03:41 +01:00
CHANGELOG.md chore(release): 2.63.23 2026-07-27 21:50:03 +02:00
CODE-OF-CONDUCT.md docs: improvements to building and docs (#5234) 2025-06-29 09:28:39 +02:00
compose.yaml fix: correct environment variable in compose.yaml (#5910) 2026-04-18 07:48:43 +02:00
CONTRIBUTING.md docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
Dockerfile Revert "chore(deps): update all non-major dependencies (#5946)" 2026-07-26 08:00:07 +02:00
Dockerfile.s6 Revert "chore(deps): update all non-major dependencies (#5946)" 2026-07-26 08:00:07 +02:00
go.mod chore: update Go deps 2026-07-26 08:01:32 +02:00
go.sum chore: update Go deps 2026-07-26 08:01:32 +02:00
LICENSE docs: add link to contributing and license in readme 2025-06-29 10:13:01 +02:00
main.go fix: exit 0 when gracefully shutting down (#5555) 2025-11-16 14:13:21 +01:00
README.md docs: cleanup header 2026-07-27 21:49:14 +02:00
SECURITY.md docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
Taskfile.yml docs: clear inconsistencies, point at repo instead of website 2026-07-27 21:47:58 +02:00
transifex.yml ci: update transifex settings 2026-03-14 07:57:18 +01:00

Warning

File Browser is archived on 2026-09-01. The last planned release has already shipped. There will be no further releases, bug fixes, or security fixes.

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview and edit your files. It is a create-your-own-cloud-kind of software where you can just install it on your server, direct it to a path and access your files through a nice web interface.

Background: Update On File Browser, March 2026.

Security

Published advisories are listed under security advisories, and reporting instructions are in SECURITY.md. This project has known security issue classes that remain unaddressed and will not be fixed:

  • Command execution, runner, and hooks (opt-in, disabled by default, #5199)
  • Session and JWT handling (#5216)

If you keep running File Browser, treat it as unmaintained software:

  • Do not expose it directly to the internet. Put it behind a reverse proxy that terminates TLS and performs its own authentication.
  • Keep the command runner disabled. It is off by default, so leave it off. See #5199 and docs/command-execution.md.
  • Run it unprivileged, inside a container, with only the directory you intend to serve mounted into it.

Documentation

Documentation on how to install, configure, and build this project lives in docs in this repository.

CONTRIBUTING.md documents how to build and develop the project, which remains useful to anyone forking it.

License

Apache License 2.0 © File Browser Contributors