Repository navigation

Commits

Commits on Oct 31, 2026
- chore(deps): update module golang.org/x/net to v0.62.0 (#377)
  renovate[bot]
  authored
  2b742d0
Commits on Oct 30, 2026
- feat: add configurable HSTS
  hacdias
  committed
  614d975
- fix: map Windows lock roots back to request paths
  hacdias
  committed
  5ee1ba4
- docs: update badges
  hacdias
  committed
  d08e227
- refactor: drop unreachable directory mount types
  hacdias
  committed
  778116b
- docs: note that CORS credentials need specific origins
  hacdias
  committed
  34923d5
- fix: reject malformed bcrypt hashes at startup
  hacdias
  committed
  91a45ed
- fix: report a refreshed lock's root as a request path
  hacdias
  committed
  d6ad0d8
- fix: refuse to unlock or refresh a lock outside the request path
  hacdias
  committed
  2ca04b9
- feat: send Strict-Transport-Security over TLS
  hacdias
  committed
  47d8f24
- fix: name the user whose username environment variable is empty
  hacdias
  committed
  0b6d4a6
- refactor: strip the url prefix in one place
  hacdias
  committed
  bf6d193
- refactor: make the directory absolute once
  hacdias
  committed
  2ae3a95
- refactor: remove unreachable byte range checks
  hacdias
  committed
  5b3fc34
- chore: drop unused fallback root certificates
  hacdias
  committed
  294a9ac
- fix: allow the Timeout and Translate headers in default CORS config
  hacdias
  committed
  22c0ab4
- fix: refuse every failed login as slowly as a bcrypt check
  hacdias
  committed
  c02062b
- perf: skip the subtree walk when no rules apply
  hacdias
  committed
  d50985a
- perf: remember the last accepted password to skip repeated bcrypt checks
  hacdias
  committed
  f2efa32
- fix: exit with an error when the server fails to start
  hacdias
  committed
  204531b
- fix: add a temporary directory to the Docker image for partial updates
  hacdias
  committed
  4c7938d
- fix: clean rule paths the way request paths are cleaned
  hacdias
  committed
  005d3b2
- fix: sandbox served files so uploaded pages cannot act as the viewer
  hacdias
  committed
  564fa48
- fix: authorize the paths a copy or move creates under the destination
  hacdias
  committed
  f198fdf
Commits on Oct 24, 2026
- perf: reuse directory metadata within PROPFIND requests (#368)
  
  arcusfelis
  and
  hacdias
  committed
  0ca5bbb
- fix: skip destination lock condition check for MOVE operations (#357)
  
  xnkyn
  and
  hacdias
  authored
  563efdd
- docs: fix fail2ban config
  hacdias
  committed
  3fab31a
- refactor: simplify HasPrefix with Trim
  hacdias
  committed
  c786266
- fix: log the proxy's client address
  hacdias
  committed
  3f474ee
- fix: compare password in constant time
  hacdias
  committed
  2889efb
- fix: set server header and idle timeouts
  hacdias
  committed
  46eee92
- fix: authorize every descendant a LOCK covers
  hacdias
  committed
  8a94365
- fix: refuse request names the OS resolves to another file
  hacdias
  committed
  f7ebe68
- chore(deps): update golang.org/x/crypto/x509roots/fallback digest to 9f2b28d (#373)
  renovate[bot]
  authored
  b630e24
- fix: warn about unprotected config when CORS is enabled (#374)
  
  xianyu-sheng
  and
  hacdias
  authored
  53a22ec

Branch selector

User selector

Datepicker

Commit history

Commits on Oct 31, 2026

Commits on Oct 30, 2026

Commits on Oct 24, 2026