octoleo/syncthing
1
0
Fork 0
mirror of https://github.com/octoleo/syncthing.git synced 2024-12-23 11:28:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
f1f21bf220
syncthing/lib
History
Jakob Borg f1f21bf220 lib/model, lib/versioner: Prevent symlink attack via versioning (fixes #4286) 
Prior to this, the following is possible:

- Create a symlink "foo -> /somewhere", it gets synced
- Delete "foo", it gets versioned
- Create "foo/bar", it gets synced
- Delete "foo/bar", it gets versioned in "/somewhere/bar"

With this change, versioners should never version symlinks.
2017-08-07 07:57:10 +02:00
..
auto all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
beacon all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
config gui, lib/config: Add default path for new folders (fixes #2157) 2017-07-20 13:16:54 +00:00
connections all: Typos 2017-07-20 13:10:46 +00:00
db lib/db: Fix test for Go 1.9's smarter time.Time values 2017-06-28 14:36:04 +02:00
dialer all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
discover all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
events cmd/syncthing: Allow custom event subscriptions (fixes #1879) 2017-04-13 17:14:34 +00:00
fs lib/fs, lib/model, lib/scanner: Make scans cancellable (fixes #3965) 2017-04-26 00:15:23 +00:00
ignore lib/ignores: Don't add text from includes to lines (fixes #4249) 2017-07-06 11:44:11 +00:00
logger cmd/syncthing, lib/logger: Set debug flags on SetDebug for tests 2017-06-02 07:04:06 +00:00
model lib/model, lib/versioner: Prevent symlink attack via versioning (fixes #4286) 2017-08-07 07:57:10 +02:00
nat all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
osutil all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
pmp all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
protocol lib/protocol: More descriptive errors on device ID parse failures 2017-04-27 14:45:35 +09:00
rand all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
rc all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
relay all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
scanner lib/ignore, lib/model: Use an interface to detect file changes, improving tests 2017-06-11 10:27:12 +00:00
sha256 all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
signature all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
stats all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
sync lib/sync: Make some tests not depend on real clock 2017-04-01 11:03:11 +00:00
tlsutil all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
upgrade lib/upgrade: 0.x to 1.0 is a minor upgrade 2017-06-25 14:17:43 +00:00
upnp all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
util all: Update license url to https (ref #3976) 2017-02-09 08:04:16 +01:00
versioner lib/model, lib/versioner: Prevent symlink attack via versioning (fixes #4286) 2017-08-07 07:57:10 +02:00
weakhash all: Correct various typos 2017-02-25 08:12:13 +00:00