Chris LuandGitHub b44cf51fe9 s3: validate copy source path segments (#9929) ...

Reject copy sources whose bucket/object fail IsValidBucketName /
IsValidObjectKey, the helpers validateRequestPath already applies to the
request URL. The object is joined onto the bucket path and `.`/`..`
segments are collapsed by the filer, so without this the source need not
stay within the parsed bucket. Route UploadPartCopy through
ValidateCopySource too; it previously only checked for empty bucket/object.

2026-06-11 17:07:15 -07:00

..

admin

admin: configure maintenance tasks via admin.toml (#9926)

2026-06-11 11:04:52 -07:00

cluster

s3: route object reads to the key's owner filer (#9806)

2026-06-03 00:12:28 -07:00

command

admin: configure maintenance tasks via admin.toml (#9926)

2026-06-11 11:04:52 -07:00

credential

grpc: don't tear down the shared master connection on a caller's own timeout (#9775)

2026-06-01 15:11:02 -07:00

filer

Cut per-subscriber replay decode and widen replay concurrency (#9917)

2026-06-10 13:08:34 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

fix(iam): return a valid user ARN from CreateUser and GetUser (#9794)

2026-06-02 22:01:57 -07:00

iamapi

fix(iam): return a valid user ARN from CreateUser and GetUser (#9794)

2026-06-02 22:01:57 -07:00

images

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

kms

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

mount

Fix filer metadata-replay OOM under mount reconnect storms (#9901)

2026-06-09 11:43:12 -07:00

mq

fix(mq): don't cache topic non-existence on transient filer errors

2026-06-08 12:04:48 -07:00

notification

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

operation

operation: index VidCache by map instead of slice (#9853)

2026-06-07 11:46:57 -07:00

pb

fix(ec): don't mix EC shards from different encode runs (#9880)

2026-06-10 22:31:18 -07:00

plugin/worker

Treat co-located volume servers as one fault domain when balancing and allocating (#9854)

2026-06-07 14:14:45 -07:00

query

fix(weed/query/engine): check for nil pointers (#9114)

2026-04-16 16:27:55 -07:00

remote_storage

fix(remote): correct content and permissions when syncing/caching remote objects (#9879)

2026-06-08 13:55:53 -07:00

replication

fix(filer.sync): replicate a rename as an atomic move, not a no-op update (#9895)

2026-06-09 12:54:28 -07:00

s3api

s3: validate copy source path segments (#9929)

2026-06-11 17:07:15 -07:00

security

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

fix(ec): don't mix EC shards from different encode runs (#9880)

2026-06-10 22:31:18 -07:00

sftpd

Don't mangle filer paths with the OS separator on Windows (#9878)

2026-06-08 13:56:02 -07:00

shell

shell: volume.tier.move can move volumes between data centers (#9925)

2026-06-11 10:46:34 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

s3: export per-bucket quota and read-only state metrics (#9923)

2026-06-11 09:03:00 -07:00

storage

feat(storage): sweep leftover empty EC .dat stubs on volume server startup (#9927)

2026-06-11 12:26:21 -07:00

telemetry

…

topology

vacuum: compact a read-only volume when an explicit volumeId is given (#9861)

2026-06-07 22:42:51 -07:00

util

4.33

2026-06-11 00:52:31 -07:00

wdclient

grpc: don't tear down the shared master connection on a caller's own timeout (#9775)

2026-06-01 15:11:02 -07:00

worker

admin: configure maintenance tasks via admin.toml (#9926)

2026-06-11 11:04:52 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00