Acts1631andGitHub 439e518bda serve dlna: bound SOAP request bodies ...

The unauthenticated DLNA control endpoint decoded arbitrary SOAP bodies
into an in-memory XML field. A LAN client could send a large request
and exhaust the server's memory.

Limit SOAP request bodies to 1 MiB and return 413 when the limit is
exceeded.

2026-07-28 17:32:00 +01:00

..

dlna

serve dlna: bound SOAP request bodies

2026-07-28 17:32:00 +01:00

docker

docker serve: add docs on what to expect when the plugin is restarted

2026-07-13 15:30:03 +01:00

ftp

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

http

serve/http: compare zip test output semantically

2026-07-15 11:00:18 +01:00

nfs

serve nfs: allow NFS clients to mount subpaths of the served remote

2026-05-24 18:09:03 +01:00

proxy

serve: fix auth proxy using stale config parameters when making a backend

2026-06-08 16:10:20 +01:00

restic

serve restic: fix --private-repos isolation bypass CVE-2026-59733

2026-07-08 16:07:11 +01:00

s3

serve s3: fix OOM and InvalidPart errors with concurrent multipart uploads - fixes #9616

2026-07-27 14:51:06 +01:00

servetest

servetest: add RunWithBackend so serve tests can pick a non-local backing

2026-06-11 12:30:19 +01:00

sftp

chore: fix some function names in comments

2026-07-02 11:30:15 +01:00

webdav

serve webdav: fix MOVE overwrite failing without Overwrite header

2026-07-04 09:57:27 +01:00

rc_test.go

serve: Add rc control for serve commands #4505

2025-04-09 11:12:07 +01:00

rc.go

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00

serve.go

http: add basic metadata and provide it via serve

2025-11-17 16:52:30 +00:00