mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2026-08-13 13:53:06 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity
4703 commits 4 branches 384 tags 84 MiB
Commit graph

4703 commits

This branch
This branch
All branches
Author SHA1 Message Date
ed c122e103bd hooks: xar/xbr: old/new ap 2026-07-27 18:45:35 +00:00
ed 6226858b89 windows: fix fsnt detection 2026-07-27 17:35:45 +00:00
ed cea97ac6fd windows: restrict tool paths; 
the warning in commit bb40804f2d is still true, but
this makes copyparty slightly safer in environments
where hostile binaries may appear in CWD
 2026-07-27 17:34:52 +00:00
ed bc45299b86 windows: optimize sparse file creation; 
previously shelled out to system32/fsutil.exe; expensive and
pointless since all it does is call DeviceIoControl (ioctl)

this is not a security fix; just like most software on windows,
copyparty is still vulnerable to DLL hijacking, so this change
makes little-to-no difference security-wise; commit bb40804f2d

plus, the default config (sharing current folder read-write
without auth) was meant to be obviously insecure, intended for
quick shares on a small LAN rather than untrusted networks
 2026-07-27 17:20:25 +00:00
ed bb40804f2d windows: add DLL-hijacking warning; 
famously, windows prefers cwd when resolving a binary to execute,
rather than a predefined PATH like linux / unix / every other OS

even worse, it also does this for DLLs, and mitigating *that*
is infeasible because it depends on variables we dont control

print a warning in case someone is unaware of this
 2026-07-27 17:15:00 +00:00
ed c70dc7ac56 android: fix cross-fs mv; closes #1563 2026-07-26 21:19:33 +00:00
ed b6abc33fb3 lo: rlo: more spaghetti 2026-07-26 16:49:05 +00:00
ed 537a99df52 bump session-cookie from 20 to 24 ch 2026-07-26 16:47:17 +00:00
ed cdb474c8ec fix slow boot when a volume root has many files 2026-07-26 16:45:49 +00:00
ed 0f2040c383 ceil by integer math 2026-07-26 15:23:33 +00:00
ed e49f6cca17 py2: future division 2026-07-26 15:19:58 +00:00
ed 10db4236bf wopi: new-file, j2-template 2026-07-24 15:34:56 +00:00
Brandon Doornbos d57bb0c701
add wopi (#1495) 
basic wopi integration

---------

Signed-off-by: ed <s@ocv.me>
Co-authored-by: ed <s@ocv.me>
 2026-07-24 15:28:05 +00:00
Nia fface524c3
nix: use ffmpeg-headless (#1530) 2026-07-22 17:16:02 +02:00
ed bae77b9078 hooks: xau: fix argv (ap, not wark) 2026-07-21 18:40:47 +00:00
ed b2e4b1c46c shares: dont suggest write for fileshares; 
the ui would still show the option to grant write-permission
when creating a fileshare; pointless since an existing file
can't be overwritten without the delete-permission

while this is obvious and nobody would intentionally create
a fileshare with write, avoid any confusion by hiding it
 2026-07-18 20:36:41 +00:00
ed 4543ab31d3 cgen cleanup 2026-07-17 22:20:56 +00:00
ed 856fada3c7 th-covers volflag; no disables folderthumbs 2026-07-17 22:18:17 +00:00
stackxp aa86235360
hooks: xiu: fix fork (#1558) 2026-07-17 18:33:06 +00:00
ed 6a9437b77c shares: fix md-viewer 2026-07-16 20:32:35 +00:00
ed 5952401815 th: video: prefer embedded cover/pic 2026-07-15 22:00:33 +00:00
ed ed0be42a3b th: demote vips (#1556); 
use libvips as last resort due to risk of OOM; example:

libvips defers to imagemagick for animated avif, and imagemagick
probably does an identify, iterating through each frame, itself
consuming 100+ MiB RAM, which libvips amplifies to 7+ GiB

similar behavior is observed with `identify a.mkv` in a shell
 2026-07-15 21:59:45 +00:00
ed daf144af61 up2k: fix dragdrop datatransfer type detection; 
`text/uri-list` observed before `Files` once on wayland dolphin

Co-authored-by: Til Schmitter <til.schmitter@gmail.com>
 2026-07-15 21:21:32 +00:00
ed a7c99094dd add --srch-nfkc (closes #1555); 
option to unicode-normalize filepaths during search; useful for:
* macos servers with cjk filenames
* cjk stuff originating from a macos device
 2026-07-15 20:09:11 +00:00
ed daee3e8500 docs: config include (#1554) 2026-07-12 18:47:15 +00:00
ed 96bafb8f4a update pkgs to 1.20.18 2026-07-09 22:59:43 +00:00
ed e700e4c421 v1.20.18 2026-07-09 22:54:41 +00:00
ed e15f292766 th: no keepalive-pokes if th-clean 0 2026-07-09 22:16:11 +00:00
ed 8884606138 shadowing: //NULL as unmap keyword 2026-07-09 21:42:59 +00:00
ed 12878e6c1c show_hist: shadowing gave false-positive 2026-07-09 20:16:29 +00:00
ed 29e145f5e4 rlo always unless no or blank 2026-07-09 19:07:18 +00:00
ed 85a8cc99ba bwrap: default-disable; 
many distros dont care about FHS, so
th-bwrap cannot be autoconfigured
 2026-07-09 18:56:25 +00:00
ed a523ba231f update pkgs to 1.20.17 2026-07-06 19:46:00 +00:00
ed f0feab0889 v1.20.17 2026-07-06 19:37:07 +00:00
ed e40755331b fix GHSA-x5pq-m9p8-f4vx; no dk with fk 2026-07-06 17:00:23 +00:00
ed 89040874f5 shr: remove upget (serves no purpose) 2026-07-06 16:17:38 +00:00
ed 9fa950bcfa plaintext readme/logue volflags 2026-07-06 16:11:20 +00:00
ed a3fbba10f7 genhelp: FULL_HELP 2026-07-06 15:51:14 +00:00
ed 741b00f342 fix tests 2026-07-06 10:18:29 +00:00
ed 2c8325a770 show-hist: nested volumes notice 2026-07-06 10:18:02 +00:00
ed db68353e22 docker blocks bwrap 2026-07-06 08:55:20 +00:00
ed 68568b7743 exe: deps: update pillow 2026-07-05 20:59:31 +00:00
ed 3888048755 windows fix; closes #1543 2026-07-05 19:29:32 +00:00
ed 379c0aa6b4 volflags: no_readme, no_logues 2026-07-05 19:28:51 +00:00
ed 8c4e931300 sftp: filter spam from portscanners (closes #1519); 
also use a threadpool for accepting clients, to avoid
spinning up a new thread for each hit from a portscanner
 2026-07-05 18:59:09 +00:00
ed 32d074ffc5 docker: version/ctime labels; closes #1532 2026-07-05 16:08:01 +00:00
ed 85be3b8de2 detect bwrap init-fail; prisonparty et al 2026-07-04 21:46:41 +00:00
ed 7b21e9f9ce r 2026-07-04 21:41:12 +00:00
suhas 56b6db0875
contrib: traefik + docker (#1511) 
* add traefik compose file
* add copyparty compose file w/ traefik

Signed-off-by: suhas <hi@suhas.one>
 2026-07-04 09:33:18 +00:00
Mobin fe006073a9
docs: s6-notify (#1500) 
The way to use the S6_NOTIFY_FD is different between dinit and s6, but the README only mentioned dinit syntax with a link to the s6 documentation
 2026-07-04 09:27:16 +00:00