Replace AuthRequired bool with NoAuth bool on the rc.Call struct and flip the auth check logic. Previously endpoints were unauthenticated by default and had to opt in with AuthRequired: true, which led to security vulnerabilities when developers forgot to set the flag. Now all endpoints require authentication by default. Only explicitly safe read-only endpoints are marked with NoAuth: true: - rc/noop - rc/error - rc/list - core/version - core/stats - core/group-list - core/transferred - core/du - cache/stats - vfs/list - vfs/stats - vfs/queue - job/status - job/list See GHSA-25qr-6mpr-f7qx, GHSA-jfwf-28xr-xw6q
8 lines
224 B
Go
8 lines
224 B
Go
// Build for iclouddrive for unsupported platforms to stop go complaining
|
|
// about "no buildable Go source files "
|
|
|
|
//go:build plan9 || solaris
|
|
|
|
// Package iclouddrive implements the iCloud Drive backend
|
|
package iclouddrive
|