Henrique Dias ec13054671 fix(share): stop exposing password hash and bypass token in share API (GHSA-833g-cqhp-h72j)
The share management endpoints serialized the storage struct directly, returning
the bcrypt password_hash (crackable offline) and the bypass token for every
share an authenticated caller could list, with admins seeing them for all users.
Return a response DTO that exposes only whether a share is password-protected
(hasPassword) and drops both secrets. The storage struct keeps its tags so the
secrets stay persisted and the server-side auth/public flows are unchanged.
Updates the frontend to use hasPassword and adds a regression test.
2026-06-27 09:08:56 +02:00
2025-11-15 09:01:21 +01:00
2025-11-15 09:01:21 +01:00
2026-02-14 07:35:34 +01:00
2025-11-13 14:21:11 +01:00
2026-06-23 13:33:10 +02:00
2025-12-06 11:33:43 +01:00
2026-06-13 07:19:01 +02:00
2026-06-13 07:19:01 +02:00
2026-03-11 19:32:42 +01:00
2026-03-14 07:57:18 +01:00

Build Go Report Card Version

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview and edit your files. It is a create-your-own-cloud-kind of software where you can just install it on your server, direct it to a path and access your files through a nice web interface.

Documentation

Documentation on how to install, configure, and contribute to this project is hosted at filebrowser.org.

Project Status

This project is a finished product which fulfills its goal: be a single binary web File Browser which can be run by anyone anywhere. That means that File Browser is currently on maintenance-only mode. Therefore, please note the following:

  • It can take a while until someone gets back to you. Please be patient.
  • Issues are meant to track bugs. Unrelated issues will be converted into discussions.
  • The priority is triaging issues, addressing security issues and reviewing pull requests meant to solve bugs.
  • No new features are planned. Pull requests for new features are not guaranteed to be reviewed.

Please read @hacdias' personal reflection on the project status.

Contributing

Contributions are always welcome. To start contributing to this project, read our guidelines first.

License

Apache License 2.0 © File Browser Contributors

Languages
Go 47.4%
Vue 33%
TypeScript 10.9%
CSS 6.9%
HTML 1.2%
Other 0.6%