14 Commits

Author	SHA1	Message	Date
dinawo	a8af857cd3	security: fix vulnerabilities and harden code (2026-03-12) ... Path traversal fixes: - DeleteFile.js: use path.resolve() + symlink protection (CRITICAL) - DeleteFileFolder.js: add path.resolve() validation + symlink check (CRITICAL) - RenameFile.js: use path.resolve() with proper prefix check + symlink guard (HIGH) - attachments.js: add baseDir validation + skip symlinks in recursive search (MEDIUM) XSS fixes: - dashboard.js: escape user input in onerror/onclick inline attributes (HIGH) - paramadminsettingsetup.script.js: escape values in innerHTML template (MEDIUM) Input validation: - inputValidationMiddleware.js: block suspicious requests instead of logging only (MEDIUM) Version bump: 1.2.2-beta → 1.2.3-beta	2026-03-12 20:18:28 +01:00
Dinawo	2df1b28962	Update v1.2.0-beta - Dynamic context menu & permissions ... ✨ New Features: - Dynamic permission-based context menus for files and folders - Support for collaborative folder access control - Upload to specific folders including shared folders - Changelog modal for version updates - Improved dark mode synchronization 🐛 Bug Fixes: - Fixed context menu displaying incorrect options - Fixed CSS !important override preventing dynamic menu behavior - Fixed folder collaboration permission checks - Fixed breadcrumb navigation with empty segments - Fixed "Premature close" error loop in attachments - Fixed missing user variable in admin routes - Fixed avatar loading COEP policy issues 🔒 Security: - Added security middleware (CSRF, rate limiting, input validation) - Fixed collaboration folder access validation - Improved shared folder permission handling 🎨 UI/UX Improvements: - Removed Actions column from folder view - Context menu now properly hides/shows based on permissions - Better visual feedback for collaborative folders - Improved upload flow with inline modals 🧹 Code Quality: - Added collaboration data to folder routes - Refactored context menu logic for better maintainability - Added debug logging for troubleshooting - Improved file upload handling with chunking support	2025-10-25 23:55:51 +02:00
Dinawo	de8c5ccb84	Update v1.1.1-beta1	2025-06-14 22:01:39 +02:00
Dinawo	51d11a6c36	Update v1.1.0-beta.1	2024-12-21 18:16:25 +01:00
Dinawo	f7658eca22	V1.0.0-beta.17 Update 2	2024-12-15 00:49:12 +01:00
Dinawo	243ab5f55e	V1.0.0-beta.17 Update 1 ... Note: We appreciate your feedback and bug reports to continue improving our platform. Thank you for your continued support!	2024-12-01 22:18:07 +01:00
Dinawo	9ff4642a10	V1.0.0-beta.16 Update ... Note: We appreciate your feedback and bug reports to continue improving our platform. Thank you for your continued support!	2024-10-27 16:48:30 +01:00
Dinawo	44631acfc6	Urgent correction of version v1.0.0-beta.14 due to crash issues when acting on the CDN.	2024-07-12 18:13:03 +02:00
Dinawo	d76a781680	Update v1.0.0-beta.12, addition of external APIs and optimization	2024-05-28 20:20:52 +02:00
Dinawo	11856846d8	Refactor Dockerfile and docker-compose.yml to use new directory structure and update volume paths	2024-05-08 01:12:12 +02:00
Dinawo	d627bf5b6c	Update French error message in showFileInfo function	2024-04-17 17:04:01 +02:00
Dinawo	7a02f2682c	Add new dependencies and update file paths	2024-04-17 01:42:24 +02:00
Dinawo	4e2e085a63	Update routes and file paths, fix authentication and security issues	2024-04-13 22:17:54 +02:00
Dinawo	be57c29e6e	First commit of the new Insider version on docker	2024-03-27 18:20:08 +01:00