Jakob Borg f1f21bf220 lib/model, lib/versioner: Prevent symlink attack via versioning (fixes #4286) ...

Prior to this, the following is possible:

- Create a symlink "foo -> /somewhere", it gets synced
- Delete "foo", it gets versioned
- Create "foo/bar", it gets synced
- Delete "foo/bar", it gets versioned in "/somewhere/bar"

With this change, versioners should never version symlinks.

2017-08-07 07:57:10 +02:00

..

auto

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

beacon

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

config

gui, lib/config: Add default path for new folders (fixes #2157)

2017-07-20 13:16:54 +00:00

connections

all: Typos

2017-07-20 13:10:46 +00:00

db

lib/db: Fix test for Go 1.9's smarter time.Time values

2017-06-28 14:36:04 +02:00

dialer

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

discover

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

events

cmd/syncthing: Allow custom event subscriptions (fixes #1879)

2017-04-13 17:14:34 +00:00

fs

lib/fs, lib/model, lib/scanner: Make scans cancellable (fixes #3965)

2017-04-26 00:15:23 +00:00

ignore

lib/ignores: Don't add text from includes to lines (fixes #4249)

2017-07-06 11:44:11 +00:00

logger

cmd/syncthing, lib/logger: Set debug flags on SetDebug for tests

2017-06-02 07:04:06 +00:00

model

lib/model, lib/versioner: Prevent symlink attack via versioning (fixes #4286)

2017-08-07 07:57:10 +02:00

nat

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

osutil

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

pmp

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

protocol

lib/protocol: More descriptive errors on device ID parse failures

2017-04-27 14:45:35 +09:00

rand

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

rc

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

relay

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

scanner

lib/ignore, lib/model: Use an interface to detect file changes, improving tests

2017-06-11 10:27:12 +00:00

sha256

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

signature

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

stats

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

sync

lib/sync: Make some tests not depend on real clock

2017-04-01 11:03:11 +00:00

tlsutil

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

upgrade

lib/upgrade: 0.x to 1.0 is a minor upgrade

2017-06-25 14:17:43 +00:00

upnp

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

util

all: Update license url to https (ref #3976)

2017-02-09 08:04:16 +01:00

versioner

lib/model, lib/versioner: Prevent symlink attack via versioning (fixes #4286)

2017-08-07 07:57:10 +02:00

weakhash

all: Correct various typos

2017-02-25 08:12:13 +00:00