webmin

mirror of https://github.com/webmin/webmin.git synced 2026-07-25 10:50:31 +01:00

Author	SHA1	Message	Date
Ilia Ross	99f35fa38a	Fix to move URL download destination controls to global ACL	2026-07-14 02:52:36 +02:00
Ilia Ross	934073532f	Fix to use the existing HTTP and FTP mode 7 callback	2026-07-14 02:27:10 +02:00
Ilia Ross	1555224592	Fix to refactor download address checks to use callback bundles ⓘ Extend HTTP and FTP download callbacks with destination validation while preserving legacy tracking callbacks and enforcing SSRF policy across redirects, proxies, caches, and direct/passive sockets. https://github.com/webmin/webmin/pull/2789#discussion_r3567985773	2026-07-13 13:36:34 +02:00
Ilia Ross	1ca52c9a97	Add ACL controls for URL download destinations Block non-public HTTP, HTTPS and FTP destinations by default in File Manager, Mailboxes and Upload and Download, with per-user IP/CIDR exceptions, redirect and proxy protection, cache isolation, and current-ACL enforcement for scheduled jobs.	2026-07-12 14:57:08 +02:00
Ilia Ross	30018091ee	Add tests for `mailbox_uncompress_folder` Some checks failed Tests / prove (push) Has been cancelled Details Package and upload artifacts / build (push) Has been cancelled Details Close inactive / close-inactive (push) Has been cancelled Details	2026-07-12 02:23:05 +02:00
Ilia Ross	f2fa917827	Add test	2026-07-05 13:22:43 +02:00