Xyphen/fileshare
SHA256
Watch
2
0
Fork
You've already forked fileshare
 0
Code Issues 1 Pull requests Releases 20 Wiki Activity Actions
20 releases 20 tags
  • v1.3.4 8e2a669e89

    v1.3.4 [SECURITY FIX]
    All checks were successful
    build (ci) / build (amd64, x86-64) (push) Successful in 10s
    Details
    build (ci) / build (arm64, arm64) (push) Successful in 9s
    Details
    build the bins / build (amd64, x86-64) (push) Successful in 10s
    Details
    build the bins / build (arm64, arm64) (push) Successful in 9s
    Details
    build the bins / publish (push) Successful in 9s
    Details
    Stable

    xyphen-ci released this 2026-10-15 00:32:20 +00:00 | 33 commits to stable since this release

    When file deduplication was implemented into Xyphen Fileshare, in came with it another flaw; Shared URLs. If I uploaded a screenshot or an image, and requested 1 hour, the server would give me 1 hour. However, if an attacker uploaded my file indefinitely, and I requested 1 hour, I'd just get the attackers link. Not my own. That link I'd receive would be indefinite, and would never expire.

    This fixes that issue, and patches various other issues with it. It's a small overhaul. It's not that pretty as I slapped it together in 15 minutes and spent 5 of them making coffee, but I'm in the process of working on a full refactor anyways.

    Fixes

    fix: separate upload links from duplicated files. opsec. (8e2a669)

    Downloads