Paul Nothaft 89c6a673bf fix(backend): validate the S3 endpoint host before the restore download ...

downloadFileFromS3() built an S3StorageAdapter and called .download()
directly, skipping the isHostAllowed() private-IP/DNS-rebinding guard
that testConnection() applies elsewhere — an admin with backup.restore
could point the configured S3 endpoint at an internal/metadata address
for unauthenticated egress via the server.

2026-09-10 20:35:16 +02:00

..

__tests__

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

config

refactor(backend): standardize error responses, logging, pagination

2026-07-03 07:49:45 +02:00

constants

feat(feedback): a third identity mode with one shared colour tag per photo (#1197) (#1208)

2026-08-28 08:19:41 +02:00

database

fix: retain revocations for tokens without expiry

2026-09-08 15:54:01 +02:00

middleware

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

openapi

feat: public v1 API + token management + OpenAPI docs (#322)

2026-04-27 22:38:00 +02:00

routes

fix(backup): honor the configured database-backup destination path (#1366)

2026-09-09 22:27:18 +02:00

services

fix(backend): validate the S3 endpoint host before the restore download

2026-09-10 20:35:16 +02:00

usage

feat(usage): prompt existing admins once for usage reporting after an update

2026-09-08 16:25:51 +02:00

utils

fix: retain revocations for tokens without expiry

2026-09-08 15:54:01 +02:00