Henrique Dias 883a36f02f fix(auth): reject signup when normalized home dir collides (GHSA-7rc3-g7h6-22m7)
cleanUsername is many-to-one, so distinct usernames (e.g. "teamone/x" and
"teamone-x") can normalize to the same home directory. With CreateUserDir
enabled, the second registrant silently reused the first user's directory,
breaking per-user isolation. Add a GetByScope lookup and reject a signup whose
derived scope is already taken. The check is gated on CreateUserDir: when it is
off, signups intentionally share the configured default scope. Adds a regression
test for the colliding-username case.
2026-06-27 09:08:56 +02:00
2025-11-15 09:01:21 +01:00
2025-11-15 09:01:21 +01:00
2026-02-14 07:35:34 +01:00
2025-11-13 14:21:11 +01:00
2026-06-23 13:33:10 +02:00
2025-12-06 11:33:43 +01:00
2026-06-13 07:19:01 +02:00
2026-06-13 07:19:01 +02:00
2026-03-11 19:32:42 +01:00
2026-03-14 07:57:18 +01:00

Build Go Report Card Version

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview and edit your files. It is a create-your-own-cloud-kind of software where you can just install it on your server, direct it to a path and access your files through a nice web interface.

Documentation

Documentation on how to install, configure, and contribute to this project is hosted at filebrowser.org.

Project Status

This project is a finished product which fulfills its goal: be a single binary web File Browser which can be run by anyone anywhere. That means that File Browser is currently on maintenance-only mode. Therefore, please note the following:

  • It can take a while until someone gets back to you. Please be patient.
  • Issues are meant to track bugs. Unrelated issues will be converted into discussions.
  • The priority is triaging issues, addressing security issues and reviewing pull requests meant to solve bugs.
  • No new features are planned. Pull requests for new features are not guaranteed to be reviewed.

Please read @hacdias' personal reflection on the project status.

Contributing

Contributions are always welcome. To start contributing to this project, read our guidelines first.

License

Apache License 2.0 © File Browser Contributors

Languages
Go 47.4%
Vue 33%
TypeScript 10.9%
CSS 6.9%
HTML 1.2%
Other 0.6%