Commits

Commit history

1. Commits on Sep 19, 2026

   • fix: keep Docker as root, close s3_hostname SSRF, unbreak 404 tests

     Show description for 031d300
     vastsa

     committed
     031d300View commit details

     Copy full SHA for 031d300

     View code at this pointBrowse repository at this point

   • 全量修复/补测试+UED改进 (#535)

     Show description for 57c75a7
     Marrrrrrrrry

     authored
     57c75a7View commit details

     Copy full SHA for 57c75a7

     View code at this pointBrowse repository at this point
2. Commits on Sep 16, 2026

   • feat: mint extract codes from data/local without re-upload

     Show description for 93a30a2
     vastsa

     committed
     93a30a2View commit details

     Copy full SHA for 93a30a2

     View code at this pointBrowse repository at this point
3. Commits on Sep 14, 2026

   • fix: don't let a legacy background value block settings saves

     Show description for eb2db8f
     vastsa

     committed
     eb2db8fView commit details

     Copy full SHA for eb2db8f

     View code at this pointBrowse repository at this point
4. Commits on Sep 10, 2026

   • ci: add test pipeline and API contract guard

     Show description for 775f3fc
     Marrrrrrrrry

     committed
     775f3fcView commit details

     Copy full SHA for 775f3fc

     View code at this pointBrowse repository at this point

   • test: follow public-config snake_case rename in admin-address test

     Marrrrrrrrry

     committed
     13f572aView commit details

     Copy full SHA for 13f572a

     View code at this pointBrowse repository at this point

   • refactor: single canonical snake_case keys across admin/share APIs (D7)

     Show description for c7b5eab
     Marrrrrrrrry

     committed
     c7b5eabView commit details

     Copy full SHA for c7b5eab

     View code at this pointBrowse repository at this point
5. Commits on Sep 9, 2026

   • fix: FileCodes.expired_count defaults to -1 (time-based) instead of instantly-expired 0 (D4)

     Marrrrrrrrry

     committed
     3c93718View commit details

     Copy full SHA for 3c93718

     View code at this pointBrowse repository at this point

   • perf: dashboard counters and storage quota use SQL aggregation (D3)

     Show description for baecebd
     Marrrrrrrrry

     committed
     baecebdView commit details

     Copy full SHA for baecebd

     View code at this pointBrowse repository at this point

   • fix: save_file accepts plain binary streams; repair admin local file share (D2)

     Show description for bb95017
     Marrrrrrrrry

     committed
     bb95017View commit details

     Copy full SHA for bb95017

     View code at this pointBrowse repository at this point

   • perf: cache settings refresh behind a 2s TTL, force refresh on write paths (D6)

     Marrrrrrrrry

     committed
     61d72abView commit details

     Copy full SHA for 61d72ab

     View code at this pointBrowse repository at this point

   • perf: make is_config_initialized cheap — no scrypt on the per-request probe (D1)

     Marrrrrrrrry

     committed
     ec424ddView commit details

     Copy full SHA for ec424dd

     View code at this pointBrowse repository at this point

   • feat: rename all config keys to snake_case with DB migration 007

     Show description for 5121db6
     Marrrrrrrrry

     committed
     5121db6View commit details

     Copy full SHA for 5121db6

     View code at this pointBrowse repository at this point

   • feat: declare missing config keys (opendal_scheme, chunk_expire_hours) and add config schema guard

     Show description for c5d525d
     Marrrrrrrrry

     committed
     c5d525dView commit details

     Copy full SHA for c5d525d

     View code at this pointBrowse repository at this point

   • refactor: extract setup wizard and public pages from main.py (945 -> 148 lines)

     Show description for 6587ec8
     Marrrrrrrrry

     committed
     6587ec8View commit details

     Copy full SHA for 6587ec8

     View code at this pointBrowse repository at this point

   • refactor: storage returns StoredDownload data; view layer builds starlette responses

     Marrrrrrrrry

     committed
     8322661View commit details

     Copy full SHA for 8322661

     View code at this pointBrowse repository at this point

   • refactor: storage layer accepts plain StoredFile refs and caller-fetched chunk records (core/ is now ORM-free)

     Marrrrrrrrry

     committed
     892fb24View commit details

     Copy full SHA for 892fb24

     View code at this pointBrowse repository at this point

   • refactor: move config and tasks modules from core to apps/base (core no longer imports apps)

     Marrrrrrrrry

     committed
     3396644View commit details

     Copy full SHA for 3396644

     View code at this pointBrowse repository at this point

   • feat: upgrade password hashing to memory-hard scrypt with transparent rehash

     Show description for 443cfe7
     Marrrrrrrrry

     committed
     443cfe7View commit details

     Copy full SHA for 443cfe7

     View code at this pointBrowse repository at this point

   • fix: validate background config as http(s) URL to close CSS quote-breakout in 2023 theme

     Marrrrrrrrry

     committed
     4cab625View commit details

     Copy full SHA for 4cab625

     View code at this pointBrowse repository at this point

   • test: cover presigned upload journey (proxy mode auto-confirm, status, cancel, size limit)

     Marrrrrrrrry

     committed
     a8c4072View commit details

     Copy full SHA for a8c4072

     View code at this pointBrowse repository at this point

   • test: cover merge_chunks failure modes and temp-file hygiene

     Marrrrrrrrry

     committed
     2bc278aView commit details

     Copy full SHA for 2bc278a

     View code at this pointBrowse repository at this point

   • test: cover the three data-deleting cleanup tasks (expired files, stale chunks, presign sessions)

     Marrrrrrrrry

     committed
     3f58e42View commit details

     Copy full SHA for 3f58e42

     View code at this pointBrowse repository at this point

   • test: add end-to-end ASGI journey tests for share, chunk, and auth flows

     Marrrrrrrrry

     committed
     625e50cView commit details

     Copy full SHA for 625e50c

     View code at this pointBrowse repository at this point
6. Commits on Sep 8, 2026

   • test: add shared test helpers and ASGI fixtures, dedupe 10x boilerplate

     Show description for 177a212
     Marrrrrrrrry

     committed
     177a212View commit details

     Copy full SHA for 177a212

     View code at this pointBrowse repository at this point
7. Commits on Sep 7, 2026

   • chore: engineering hardening - test tooling, lint, security fix, and cleanup

     Show description for d701c6e
     Marrrrrrrrry

     committed
     d701c6eView commit details

     Copy full SHA for d701c6e

     View code at this pointBrowse repository at this point
8. Commits on Sep 1, 2026

   • fix(logging): reduce production log noise

     vastsa

     committed
     5537f56View commit details

     Copy full SHA for 5537f56

     View code at this pointBrowse repository at this point
9. Commits on Aug 29, 2026

   • fix(chunk-upload): persist sanitized filenames

     vastsa

     committed
     da1dd06View commit details

     Copy full SHA for da1dd06

     View code at this pointBrowse repository at this point

   • fix: sanitize chunk upload file_name to prevent path traversal

     zhou-kkk

     committed
     cebac32View commit details

     Copy full SHA for cebac32

     View code at this pointBrowse repository at this point
10. Commits on Jul 23, 2026

    • fix: run Docker image as root for data volume compatibility

      Show description for fc0cbeb
      vastsa

      committed
      fc0cbebView commit details

      Copy full SHA for fc0cbeb

      View code at this pointBrowse repository at this point

    • fix: add magic-byte checks, login rate limits, and non-root Docker

      Show description for eda0a31
      vastsa

      committed
      eda0a31View commit details

      Copy full SHA for eda0a31

      View code at this pointBrowse repository at this point

    • Merge pull request #496 from vastsa/fix/pr494-security-patches

      Show description for ae77026
      vastsa

      authored
      ae77026View commit details

      Copy full SHA for ae77026

      View code at this pointBrowse repository at this point

    • fix: harden share expiry, download token, quota SQL, and CORS

      Show description for a41693f
      vastsa

      committed
      a41693fView commit details

      Copy full SHA for a41693f

      View code at this pointBrowse repository at this point
11. Commits on Jul 21, 2026

    • support text direct downloads (#490)

      Show description for 59ed733
      vastsa

      authored
      59ed733View commit details

      Copy full SHA for 59ed733

      View code at this pointBrowse repository at this point

    • fix: patch CVE dependencies and path traversal risks

      Show description for 00f3abd
      vastsa

      committed
      00f3abdView commit details

      Copy full SHA for 00f3abd

      View code at this pointBrowse repository at this point