diaspora

nocebo/diaspora

Fork 0

Commit graph

Author SHA1 Message Date

Author	SHA1	Message	Date
Thorsten Claus	6c4c6f8889	Migration Backend Part	2021-11-23 01:48:32 +01:00
Benjamin Neff	e82690963d	Add `# frozen_string_literal: true` to all files	2017-09-17 19:29:15 +02:00
Jonne Haß	0a70e51f74	Add a token the filename for exported user data Also redirect to it for download, for Amazon S3 compatibility. Prior to this patch an attacker could obtain an users export by guessing the filename with a high chance of success. Fully authenticating the download request is a lot harder due to our diverse deployment scenarios. This brings the used method in line with the photo export feature. Thanks to @tomekr for the report.	2015-04-22 20:19:17 +02:00

Thorsten Claus

6c4c6f8889

Migration Backend Part

2021-11-23 01:48:32 +01:00

Benjamin Neff

e82690963d

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

Jonne Haß

0a70e51f74

Add a token the filename for exported user data

Also redirect to it for download, for Amazon S3
compatibility.

Prior to this patch an attacker could obtain an
users export by guessing the filename with a high
chance of success. Fully authenticating the
download request is a lot harder due to our diverse
deployment scenarios.

This brings the used method in line with the photo
export feature.

Thanks to @tomekr for the report.

2015-04-22 20:19:17 +02:00

3 commits