delete url should respect http basic auth #87

New Issue

michael · 2026-01-19T18:28:55Z

michael commented

2026-01-19 18:28:55 +00:00

Originally created by @sicenul on GitHub.

I am using docker with local provider and activated http basic auth.
But as long as you know the delete url, you can delete the file immediately without providing username and password, is it intended?

Originally created by @sicenul on GitHub. I am using docker with local provider and activated http basic auth. But as long as you know the delete url, you can delete the file immediately without providing username and password, is it intended?

michael closed this issue

2026-01-19 18:28:55 +00:00

michael commented

2026-01-19 18:28:55 +00:00

@paolafrancesca commented on GitHub:

@sicenul it might be a valid point, on the other hand the delete token is already considered a secret and shown only to the uploader

@stefanbenten what do you think?

@paolafrancesca commented on GitHub: @sicenul it might be a valid point, on the other hand the delete token is already considered a secret and shown only to the uploader @stefanbenten what do you think?

michael referenced this issue

2026-01-19 18:29:58 +00:00

Have alias echo trailing newline after a successful upload #345

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: dutchcoders/transfer.sh#87