17 Commits

Author SHA1 Message Date
Ilia Ross
8f725f63c6 Fix new lines 2026-07-14 02:58:54 +02:00
Ilia Ross
99f35fa38a Fix to move URL download destination controls to global ACL 2026-07-14 02:52:36 +02:00
Ilia Ross
934073532f Fix to use the existing HTTP and FTP mode 7 callback 2026-07-14 02:27:10 +02:00
Ilia Ross
1555224592 Fix to refactor download address checks to use callback bundles
ⓘ Extend HTTP and FTP download callbacks with destination validation while preserving legacy tracking callbacks and enforcing SSRF policy across redirects, proxies, caches, and direct/passive sockets.

https://github.com/webmin/webmin/pull/2789#discussion_r3567985773
2026-07-13 13:36:34 +02:00
Ilia Ross
1ca52c9a97 Add ACL controls for URL download destinations
Block non-public HTTP, HTTPS and FTP destinations by default in File Manager, Mailboxes and Upload and Download, with per-user IP/CIDR exceptions, redirect and proxy protection, cache isolation, and current-ACL enforcement for scheduled jobs.
2026-07-12 14:57:08 +02:00
iliajie
d9ea914889 Fix to always upload to user home directory if possible 2023-07-31 03:10:00 +03:00
iliajie
1730540764 Fix to always download to user home directory if possible 2023-07-31 03:05:39 +03:00
Jamie Cameron
4cbffaa875 Handle https properly 2016-02-29 15:25:08 -08:00
Jamie Cameron
3f7ae07dd4 Usermin support for variables in allowed directories 2012-05-19 10:44:36 -07:00
Jamie Cameron
b89a5651e1 Don't include URL params in saved filename.
https://sourceforge.net/tracker/?func=detail&atid=117457&aid=3089852&group_id=17457
2010-10-18 21:16:25 -07:00
Jamie Cameron
14cb2d1964 Fix unzip in usermin 2010-07-26 07:55:55 -07:00
Jamie Cameron
9dbd5db2c9 Fix permissions 2009-07-20 23:42:32 -07:00
Jamie Cameron
69972dba9a Use new module 2009-03-03 21:32:04 +00:00
Jamie Cameron
a112fa3206 Allow scheduled downloads in Usermin 2008-06-16 03:25:30 +00:00
Jamie Cameron
39b67ba4f1 Email after upload 2008-04-19 18:45:56 +00:00
Jamie Cameron
7c4fd872c5 Email notification on completion of download 2008-04-19 18:17:44 +00:00
Jamie Cameron
fc1c1b243f Initial checkin of Webmin 2007-04-12 20:24:50 +00:00