Files
rest-server/changelog/0.10.0_2020-09-13/pull-64
2020-09-13 11:24:26 +02:00

9 lines
350 B
Plaintext

Security: Refuse overwriting config file in append-only mode
While working on the `rclone serve restic` command we noticed that is currently
possible to overwrite the config file in a repo even if `--append-only` is
specified. The first commit adds proper tests, and the second commit fixes the
issue.
https://github.com/restic/rest-server/pull/64