f-denkena/rclone
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
399bc6a6a610dec4bfee28edb47b51a0a2c60296
rclone/fs
T
History
Nick Craig-Wood 399bc6a6a6 fshttp: don't send --header values to other hosts on redirect GHSA-486v-q2wf-fp2r CVE-PENDING 
The headers set with --header and --header-download are added to
every request by the rclone transport, including redirect hops which
net/http makes to other hosts, so a credential passed with --header
for one host could be sent to any host that server chose to redirect
to.

The transport now walks the redirect chain net/http records on each
redirected request and, once the chain has visited a host other than
the one originally requested, removes the headers rather than adding
them.

Also restore the global --client-cert and --client-key config after
TestCertificates so its temporary files are not used by later tests.
2026-09-04 19:00:22 +01:00
..
accounting
accounting: stop --max-transfer overshoot in Account.WriteTo
2026-08-30 17:13:01 +01:00
asyncreader
asyncreader: run the skip-bytes test under the race detector again
2026-08-17 08:13:21 +01:00
cache
config: make parsing of duration options consistent
2025-07-08 12:08:14 +02:00
chunkedreader
fs/chunkedreader: fix spurious errors when a parallel stream is closed early
2026-07-09 17:46:31 +01:00
chunksize
build: modernize Go usage
2025-02-28 11:31:14 +00:00
config
build: modernize with "go fix -slicescontains": use slices.Contains
2026-08-21 12:23:31 +01:00
dirtree
build: modernize benchmark usage
2025-09-15 12:45:57 +01:00
driveletter
build: remove build constraint syntax for go 1.16 and older
2024-04-18 16:53:55 +02:00
filter
filter: add --files-from0 to support NUL-delimited input - fixes #9537
2026-07-02 11:21:21 +01:00
fserrors
fserrors: make http2 "server sent GOAWAY" a retriable error - fixes #9664
2026-07-29 17:35:11 +01:00
fshttp
fshttp: don't send --header values to other hosts on redirect GHSA-486v-q2wf-fp2r CVE-PENDING
2026-09-04 19:00:22 +01:00
fspath
fs: allow global variables to be overriden or set on backend creation
2025-07-23 15:09:51 +01:00
hash
fs/hash: fix xxh128 hasher size
2026-06-15 08:14:03 +02:00
list
fs: confine directory listing entries that escape the root GHSA-3vxh-3pcx-9m8q GHSA-38xv-hf3p-h7mq CVE-PENDING
2026-09-04 19:00:22 +01:00
log
build: modernize with "go fix -waitgroupgo": use WaitGroup.Go
2026-08-21 12:23:31 +01:00
logger
fs/logger: fix flaky tests by generating test data locally
2026-07-12 13:26:17 +01:00
march
march: fix goroutine leak on completed async rc jobs - fixes #9620
2026-07-29 20:29:13 +01:00
object
http: add basic metadata and provide it via serve
2025-11-17 16:52:30 +00:00
operations
fs: confine directory listing entries that escape the root GHSA-3vxh-3pcx-9m8q GHSA-38xv-hf3p-h7mq CVE-PENDING
2026-09-04 19:00:22 +01:00
rc
build: modernize with "go fix -stringsseq": use SplitSeq iterators
2026-08-21 12:23:31 +01:00
sync
build: modernize with "go fix -stringsseq": use SplitSeq iterators
2026-08-21 12:23:31 +01:00
walk
fs: confine directory listing entries that escape the root GHSA-3vxh-3pcx-9m8q GHSA-38xv-hf3p-h7mq CVE-PENDING
2026-09-04 19:00:22 +01:00
backend_config_test.go
fs: fix passwords and tokens appearing in the debug log during rclone config
2026-07-16 16:11:22 +01:00
backend_config.go
fs: fix passwords and tokens appearing in the debug log during rclone config
2026-07-16 16:11:22 +01:00
bits_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
bits.go
fs: fix docs for Bits
2023-10-23 15:43:55 +01:00
bwtimetable_test.go
fs: Allow semicolons as well as spaces in --bwlimit timetable parsing - fixes #7595
2024-07-17 11:04:01 +01:00
bwtimetable.go
fs: fix bwlimit: correctly report minutes
2026-01-27 11:44:47 +00:00
config_list_test.go
fs: fix tests for *SepList
2018-08-21 10:58:59 +01:00
config_list.go
Make flags show up with their proper names, eg SizeSuffix rather than int
2019-02-07 11:57:26 +00:00
config_test.go
rc: stop global.* connection string options changing config CVE-2026-49980
2026-06-05 15:21:01 +01:00
config.go
rc: stop global.* connection string options changing config CVE-2026-49980
2026-06-05 15:21:01 +01:00
configmap_test.go
config: redact env var config values in logs
2026-08-13 20:10:41 +02:00
configmap.go
config: redact env var config values in logs
2026-08-13 20:10:41 +02:00
countsuffix_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
countsuffix.go
build: fix gocritic lint issue dupbranchbody
2024-08-15 22:08:34 +01:00
cutoffmode_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
cutoffmode.go
fs: re-implement CutoffMode, LogLevel, TerminalColorMode with Enum
2023-10-03 15:14:24 +01:00
daemon_other.go
build: remove build constraint syntax for go 1.16 and older
2024-04-18 16:53:55 +02:00
daemon_unix.go
build: remove build constraint syntax for go 1.16 and older
2024-04-18 16:53:55 +02:00
deletemode.go
Break the fs package up into smaller parts.
2018-01-15 17:51:14 +00:00
dir_wrapper.go
combine: fix CopyDirMetadata error on upstream root
2024-03-07 11:09:07 +00:00
dir.go
fs: allow Metadata calls to be called with Directory or Object
2024-02-27 10:56:19 +00:00
direntries_test.go
build: fix up package paths after repo move
2019-07-28 18:47:38 +01:00
direntries.go
fs: Allow sync of a file and a directory with the same name
2019-06-09 15:57:05 +01:00
dump_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
dump.go
fshttp: add --dump trace to log connection level events via httptrace
2026-06-11 21:29:45 +01:00
enum_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
enum.go
fs: re-implement CutoffMode, LogLevel, TerminalColorMode with Enum
2023-10-03 15:14:24 +01:00
features.go
fs: define ListP interface for paged listing #4788
2025-04-08 15:12:53 +01:00
fingerprint_test.go
mockfs: make it so it can be registered as an Fs
2023-04-28 14:31:05 +01:00
fingerprint.go
fs: add Fingerprint to detect changes in an object
2020-06-30 12:01:36 +01:00
fs_test.go
fs: move tests into correct files
2025-11-03 14:44:39 +00:00
fs.go
lib/rest: validate ranged responses
2026-08-14 18:40:40 +02:00
log_test.go
fs: don't log the contents of objects without a String method
2026-07-15 16:43:37 +01:00
log.go
fs: don't log the contents of objects without a String method
2026-07-15 16:43:37 +01:00
metadata_mapper_code.go
build: remove build constraint syntax for go 1.16 and older
2024-04-18 16:53:55 +02:00
metadata_test.go
fs: implement --metadata-mapper to transform metatadata with a user supplied program
2023-11-18 17:49:35 +00:00
metadata.go
fs: allow Metadata calls to be called with Directory or Object
2024-02-27 10:56:19 +00:00
mimetype.go
build: use sequence Split introduced in go1.24
2025-09-15 12:45:57 +01:00
mount_helper_test.go
rclone.mount: ignore _netdev mount argument - FIxes #5808
2022-05-12 20:27:13 +01:00
mount_helper.go
build: update logging statements to make json log work - fixes #6038
2024-09-06 17:04:18 +01:00
newfs_internal_test.go
rc: stop global.* connection string options changing config CVE-2026-49980
2026-06-05 15:21:01 +01:00
newfs_test.go
fs: allow global variables to be overriden or set on backend creation
2025-07-23 15:09:51 +01:00
newfs.go
rc: stop global.* connection string options changing config CVE-2026-49980
2026-06-05 15:21:01 +01:00
open_options_test.go
fs: fix negative offset when a suffix Range request exceeds object size
2026-07-04 09:11:52 +01:00
open_options.go
build: modernize with "go fix -minmax": use min and max builtins
2026-08-21 12:23:31 +01:00
override_dir_test.go
fs: add OverrideDirectory for overriding path of directory
2023-05-14 11:22:57 +01:00
override_dir.go
fs: add OverrideDirectory for overriding path of directory
2023-05-14 11:22:57 +01:00
override_test.go
fs: move operations.NewOverrideRemote to fs.NewOverrideRemote
2022-11-21 08:02:09 +00:00
override.go
fs: when creating new fs.OverrideRemotes don't layer overrides if not needed
2023-05-09 16:28:10 +01:00
pacer_test.go
fs: move tests into correct files
2025-11-03 14:44:39 +00:00
pacer.go
Add --max-connections to control maximum backend concurrency
2025-03-25 15:49:27 +00:00
parseduration_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
parseduration.go
refactor: use strings.Builder to improve performance
2025-10-29 16:48:34 +00:00
parsetime_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
parsetime.go
rc: fix output of Time values in options/get
2023-05-04 15:04:11 +01:00
registry_test.go
config: redact env var config values in logs
2026-08-13 20:10:41 +02:00
registry.go
fs/config: add tier to config wizard
2026-07-14 14:16:19 +01:00
sizesuffix_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
sizesuffix.go
build: fix gocritic lint issue dupbranchbody
2024-08-15 22:08:34 +01:00
terminalcolormode_test.go
fs: re-implement CutoffMode, LogLevel, TerminalColorMode with Enum
2023-10-03 15:14:24 +01:00
terminalcolormode.go
fs: re-implement CutoffMode, LogLevel, TerminalColorMode with Enum
2023-10-03 15:14:24 +01:00
tristate_test.go
fs: make Flagger and FlaggerNP interfaces public so we can test flags elsewhere
2024-07-15 11:09:54 +01:00
tristate.go
fs: fix tristate conversion to JSON
2023-03-27 16:17:49 +01:00
types.go
docs: fix typos in comments and messages
2026-01-18 20:48:33 +01:00
version.go
Configurable version suffix independent of version number
2022-05-17 12:10:01 +01:00
versioncheck.go
build: update to go1.27 and make go1.26 the minimum required version
2026-08-20 12:16:48 +01:00
versionsuffix.go
Configurable version suffix independent of version number
2022-05-17 12:10:01 +01:00
versiontag.go
Start v1.76.0-DEV development
2026-07-31 18:21:36 +01:00