vh/rest-server
1
0
Fork 0
mirror of https://github.com/restic/rest-server.git synced 2025-12-07 09:36:13 -08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #64 from restic/fix-append-only

Browse Source 
Security: Refuse overwriting the config file in append-only mode
This commit is contained in:
Alexander Neumann
2018-04-02 13:25:46 +02:00
parent 899ef655ef 0f4f747b74
commit 7dd5483ea3
3 changed files with 217 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
changelog/unreleased/pull-64 Normal file
View File

@@ -0,0 +1,8 @@
Security: Refuse overwriting config file in append-only mode
While working on the `rclone serve restic` command we noticed that is currently
possible to overwrite the config file in a repo even if `--append-only` is
specified. The first commit adds proper tests, and the second commit fixes the
issue.
https://github.com/restic/rest-server/pull/64