Nick Craig-Wood faaf716e9b rc: don't expose pprof debug handlers on an unauthenticated server GHSA-mfvx-7rcj-9m5g CVE-PENDING ...

The pprof debug handlers were accessible without authentication disclosing the
process command line (which can carry backend credentials passed on the command
line) and runtime profiles.

Mount the pprof handlers only when when auth is configured or --rc-no-auth was
passed - so they obey the same rule as the rc endpoints.

Addresses GHSA-mfvx-7rcj-9m5g finding 1.

2026-07-31 13:21:59 +01:00

..

commands

Version v1.74.0

2026-05-01 15:56:56 +01:00

oracleobjectstorage

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

_index.md

s3: add Scality (RING / ARTESCA) provider

2026-07-28 17:35:11 +01:00

alias.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

amazonclouddrive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

archive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

authors.md

Add Punya Jain to contributors

2026-07-30 14:41:09 +01:00

azureblob.md

docs: azureblob,azurefiles: clarify documentation on use_az

2026-07-09 12:37:07 +01:00

azurefiles.md

azurefiles: improve modtime precision from 1s to 100ns

2026-07-14 14:13:49 +01:00

b2.md

docs: fix heading levels so sections appear in the table of contents

2026-05-20 12:09:31 +01:00

backends.md

docs: serve backend metadata as JSON on the website

2026-04-13 16:45:00 +01:00

bisync.md

docs: bisync - clarify flag interaction and minor changes

2026-06-06 12:17:06 +01:00

box.md

oauthutil: clarify token replacement prompt wording

2026-05-06 10:51:16 +01:00

bugs.md

docs: fix markdownlint issues md007/ul-indent md004/ul-style

2025-07-21 20:23:16 +02:00

cache.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

changelog.md

Changelog updates from Version v1.74.4

2026-07-08 20:10:17 +01:00

chunker.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

cloudinary.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

combine.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

compress.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

contact.md

docs: fix markdown lint issues in backend docs

2025-08-26 12:04:00 +02:00

crypt.md

docs/crypt: fix encrypted size example - Fixes #9202

2026-06-15 12:49:36 +01:00

docker.md

build: restrict the markdown languages to use for code blocks

2025-11-01 15:52:41 +01:00

docs.md

fs: fix passwords and tokens appearing in the debug log during rclone config

2026-07-16 16:11:22 +01:00

doi.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

downloads.md

docs: note macOS 10.15 (Catalina) support with version v1.70.3

2026-03-28 12:29:53 +00:00

drime.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

drive.md

drive: document shortcut IDs in lsf

2026-07-24 15:00:09 +01:00

dropbox.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

faq.md

docs: fix formatting

2026-01-23 16:55:52 +00:00

fichier.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

filefabric.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

filelu.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

filen.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

filescom.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

filtering.md

filter: add --files-from0 to support NUL-delimited input - fixes #9537

2026-07-02 11:21:21 +01:00

flags.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

ftp.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

gofile.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

googlecloudstorage.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

googlephotos.md

drive, googlephotos: warn in config wizard before using the shared client_id #9580

2026-07-07 12:35:37 +01:00

gui.md

gui: embed compressed dist.zip in the binary for smaller, reproducible builds

2026-05-01 12:46:46 +01:00

hasher.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

hdfs.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

hidrive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

http.md

http: don't list parent directory when pointing at a single file

2026-05-11 11:05:22 +01:00

huaweidrive.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

iclouddrive.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

imagekit.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

install.md

build: update to go1.26 and make go1.25 the minimum required version

2026-02-18 11:33:48 +00:00

install.sh

install.sh: fix harmless error message on install

2023-11-28 19:10:04 +00:00

internetarchive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

internxt.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

jottacloud.md

jottacloud: support whitelabel service Phonero Sky

2026-05-14 10:53:04 +01:00

KEYS

docs: document release signing and verification

2023-09-11 12:28:23 +01:00

koofr.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

licence.md

docs: fix markdownlint issue md040/fenced-code-language

2025-07-21 20:23:16 +02:00

linkbox.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

local.md

local: stop --links symlinks escaping the destination directory CVE-2026-54572

2026-07-08 16:12:24 +01:00

mailru.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

mega.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

memory.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

netstorage.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

onedrive.md

onedrive: add support for no admin mode

2026-05-19 11:21:17 +01:00

opendrive.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

overview.md

docs: fix typo

2026-04-21 21:06:49 +02:00

pcloud.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

pikpak.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

pixeldrain.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

premiumizeme.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

privacy.md

docs: update privacy policy with a section on user data

2025-10-14 16:24:07 +01:00

protondrive.md

Version v1.74.0

2026-05-01 15:56:56 +01:00

putio.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

qingstor.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

quatrix.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

rc.md

rc: don't expose pprof debug handlers on an unauthenticated server GHSA-mfvx-7rcj-9m5g CVE-PENDING

2026-07-31 13:21:59 +01:00

release_signing.md

docs: change syntax hightlighting for command examples from sh to console

2025-11-01 15:33:38 +01:00

remote_setup.md

docs: fix typo in remote setup docs

2026-06-28 23:53:05 +02:00

s3.md

s3: add Scality (RING / ARTESCA) provider

2026-07-28 17:35:11 +01:00

seafile.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sftp.md

sftp: allow silencing no hostkey validation warning

2026-07-28 15:47:26 +01:00

shade.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sharefile.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sia.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

smb.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sponsor.md

docs: update sponsors

2026-07-31 11:59:18 +01:00

storj.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

sugarsync.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

swift.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

tiers.md

docs: add tiering to the documentation - fixes #8873

2026-01-30 17:08:44 +00:00

ulozto.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

union.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

webdav.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00

yandex.md

yandex: add --yandex-upload-wait to fix 500 errors when uploading

2026-07-30 20:01:18 +01:00

zoho.md

docs: modernize rclone.org site design

2026-04-02 16:32:54 +01:00