mirror of
https://github.com/sigoden/dufs.git
synced 2026-04-08 16:49:02 +03:00
[GH-ISSUE #263] webDAV: Disclosure of file names in directories on the path. #137
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @289699522 on GitHub (Sep 6, 2023).
Original GitHub issue: https://github.com/sigoden/dufs/issues/263
Problem
When I use
dufs -a user1:pass1@/dir1/dir2/dir3, under normal circumstances , user1 don't have permission to list files under/dir1and/dir1/dir2, but when I access the above directories through webDAV, user1 can list the files and dictionaries under/dir1and/dir1/dir2.Log
Log shows status Code is 207.
Environment:
@sigoden commented on GitHub (Sep 6, 2023):
Webdav must be designed like this.
This is because some webdav clients do not carry the Authorization header when listing files.