GO-2024-3190: Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist

handles

package

v3.10.1 Latest Latest Go to latest Published: Feb 5, 2023 License: AGPL-3.0 Imports: 34 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/alist-org/alist

Links

Open Source Insights

Documentation ¶

Index ¶

func AddAria2(c *gin.Context)
func BuildIndex(c *gin.Context)
func Cancel2FAById(c *gin.Context)
func CancelCopyTask(c *gin.Context)
func CancelDownTask(c *gin.Context)
func CancelTransferTask(c *gin.Context)
func CancelUploadTask(c *gin.Context)
func ClearDoneCopyTasks(c *gin.Context)
func ClearDoneDownTasks(c *gin.Context)
func ClearDoneTransferTasks(c *gin.Context)
func ClearDoneUploadTasks(c *gin.Context)
func ClearIndex(c *gin.Context)
func CreateMeta(c *gin.Context)
func CreateStorage(c *gin.Context)
func CreateUser(c *gin.Context)
func CurrentUser(c *gin.Context)
func DeleteCopyTask(c *gin.Context)
func DeleteDownTask(c *gin.Context)
func DeleteMeta(c *gin.Context)
func DeleteSetting(c *gin.Context)
func DeleteStorage(c *gin.Context)
func DeleteTransferTask(c *gin.Context)
func DeleteUploadTask(c *gin.Context)
func DeleteUser(c *gin.Context)
func DisableStorage(c *gin.Context)
func DoneCopyTask(c *gin.Context)
func DoneDownTask(c *gin.Context)
func DoneTransferTask(c *gin.Context)
func DoneUploadTask(c *gin.Context)
func Down(c *gin.Context)
func EnableStorage(c *gin.Context)
func Favicon(c *gin.Context)
func FsCopy(c *gin.Context)
func FsDirs(c *gin.Context)
func FsForm(c *gin.Context)
func FsGet(c *gin.Context)
func FsList(c *gin.Context)
func FsMkdir(c *gin.Context)
func FsMove(c *gin.Context)
func FsOther(c *gin.Context)
func FsRemove(c *gin.Context)
func FsRename(c *gin.Context)
func FsStream(c *gin.Context)
func Generate2FA(c *gin.Context)
func GetDriverInfo(c *gin.Context)
func GetMeta(c *gin.Context)
func GetProgress(c *gin.Context)
func GetSetting(c *gin.Context)
func GetStorage(c *gin.Context)
func GetUser(c *gin.Context)
func GithubLoginCallback(c *gin.Context)
func GithubLoginRedirect(c *gin.Context)
func Link(c *gin.Context)
func ListDriverInfo(c *gin.Context)
func ListDriverNames(c *gin.Context)
func ListMetas(c *gin.Context)
func ListSettings(c *gin.Context)
func ListStorages(c *gin.Context)
func ListUsers(c *gin.Context)
func LoadAllStorages(c *gin.Context)
func Login(c *gin.Context)
func Plist(c *gin.Context)
func Proxy(c *gin.Context)
func PublicSettings(c *gin.Context)
func ResetToken(c *gin.Context)
func SaveSettings(c *gin.Context)
func Search(c *gin.Context)
func SetAria2(c *gin.Context)
func StopIndex(c *gin.Context)
func UndoneCopyTask(c *gin.Context)
func UndoneDownTask(c *gin.Context)
func UndoneTransferTask(c *gin.Context)
func UndoneUploadTask(c *gin.Context)
func UpdateCurrent(c *gin.Context)
func UpdateIndex(c *gin.Context)
func UpdateMeta(c *gin.Context)
func UpdateStorage(c *gin.Context)
func UpdateUser(c *gin.Context)
func Verify2FA(c *gin.Context)
type AddAria2Req
type DirReq
type DirResp
type FsGetReq
type FsGetResp
type FsListResp
type FsOtherReq
type ListReq
type LoginReq
type MkdirOrLinkReq
type MoveCopyReq
type ObjResp
type RemoveReq
type RenameReq
type SearchReq
type SearchResp
type SetAria2Req
type TaskInfo
type UpdateIndexReq
type UserResp
type Verify2FAReq

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AddAria2 ¶

func AddAria2(c *gin.Context)

func BuildIndex ¶ added in v3.6.0

func BuildIndex(c *gin.Context)

func Cancel2FAById ¶

func Cancel2FAById(c *gin.Context)

func CancelCopyTask ¶

func CancelCopyTask(c *gin.Context)

func CancelDownTask ¶

func CancelDownTask(c *gin.Context)

func CancelTransferTask ¶

func CancelTransferTask(c *gin.Context)

func CancelUploadTask ¶

func CancelUploadTask(c *gin.Context)

func ClearDoneCopyTasks ¶

func ClearDoneCopyTasks(c *gin.Context)

func ClearDoneDownTasks ¶

func ClearDoneDownTasks(c *gin.Context)

func ClearDoneTransferTasks ¶

func ClearDoneTransferTasks(c *gin.Context)

func ClearDoneUploadTasks ¶

func ClearDoneUploadTasks(c *gin.Context)

func ClearIndex ¶ added in v3.7.1

func ClearIndex(c *gin.Context)

func CreateMeta ¶

func CreateMeta(c *gin.Context)

func CreateStorage ¶

func CreateStorage(c *gin.Context)

func CreateUser ¶

func CreateUser(c *gin.Context)

func CurrentUser ¶

func CurrentUser(c *gin.Context)

CurrentUser get current user by token if token is empty, return guest user

func DeleteCopyTask ¶

func DeleteCopyTask(c *gin.Context)

func DeleteDownTask ¶

func DeleteDownTask(c *gin.Context)

func DeleteMeta ¶

func DeleteMeta(c *gin.Context)

func DeleteSetting ¶

func DeleteSetting(c *gin.Context)

func DeleteStorage ¶

func DeleteStorage(c *gin.Context)

func DeleteTransferTask ¶

func DeleteTransferTask(c *gin.Context)

func DeleteUploadTask ¶

func DeleteUploadTask(c *gin.Context)

func DeleteUser ¶

func DeleteUser(c *gin.Context)

func DisableStorage ¶

func DisableStorage(c *gin.Context)

func DoneCopyTask ¶

func DoneCopyTask(c *gin.Context)

func DoneDownTask ¶

func DoneDownTask(c *gin.Context)

func DoneTransferTask ¶

func DoneTransferTask(c *gin.Context)

func DoneUploadTask ¶

func DoneUploadTask(c *gin.Context)

func Down ¶

func Down(c *gin.Context)

func EnableStorage ¶

func EnableStorage(c *gin.Context)

func Favicon ¶

func Favicon(c *gin.Context)

func FsCopy ¶

func FsCopy(c *gin.Context)

func FsDirs ¶

func FsDirs(c *gin.Context)

func FsForm ¶

func FsForm(c *gin.Context)

func FsGet ¶

func FsGet(c *gin.Context)

func FsList ¶

func FsList(c *gin.Context)

func FsMkdir ¶

func FsMkdir(c *gin.Context)

func FsMove ¶

func FsMove(c *gin.Context)

func FsOther ¶

func FsOther(c *gin.Context)

func FsRemove ¶

func FsRemove(c *gin.Context)

func FsRename ¶

func FsRename(c *gin.Context)

func FsStream ¶

func FsStream(c *gin.Context)

func Generate2FA ¶

func Generate2FA(c *gin.Context)

func GetDriverInfo ¶

func GetDriverInfo(c *gin.Context)

func GetMeta ¶

func GetMeta(c *gin.Context)

func GetProgress ¶ added in v3.6.0

func GetProgress(c *gin.Context)

func GetSetting ¶

func GetSetting(c *gin.Context)

func GetStorage ¶

func GetStorage(c *gin.Context)

func GetUser ¶

func GetUser(c *gin.Context)

func GithubLoginCallback ¶ added in v3.7.1

func GithubLoginCallback(c *gin.Context)

func GithubLoginRedirect ¶ added in v3.7.1

func GithubLoginRedirect(c *gin.Context)

func Link ¶

func Link(c *gin.Context)

Link return real link, just for proxy program, it may contain cookie, so just allowed for admin

func ListDriverInfo ¶

func ListDriverInfo(c *gin.Context)

func ListDriverNames ¶

func ListDriverNames(c *gin.Context)

func ListMetas ¶

func ListMetas(c *gin.Context)

func ListSettings ¶

func ListSettings(c *gin.Context)

func ListStorages ¶

func ListStorages(c *gin.Context)

func ListUsers ¶

func ListUsers(c *gin.Context)

func LoadAllStorages ¶ added in v3.7.1

func LoadAllStorages(c *gin.Context)

func Login(c *gin.Context)

func Plist ¶

func Plist(c *gin.Context)

func Proxy ¶

func Proxy(c *gin.Context)

func PublicSettings ¶

func PublicSettings(c *gin.Context)

func ResetToken ¶

func ResetToken(c *gin.Context)

func SaveSettings ¶

func SaveSettings(c *gin.Context)

func Search ¶ added in v3.6.0

func Search(c *gin.Context)

func SetAria2 ¶

func SetAria2(c *gin.Context)

func StopIndex ¶ added in v3.6.0

func StopIndex(c *gin.Context)

func UndoneCopyTask ¶

func UndoneCopyTask(c *gin.Context)

func UndoneDownTask ¶

func UndoneDownTask(c *gin.Context)

func UndoneTransferTask ¶

func UndoneTransferTask(c *gin.Context)

func UndoneUploadTask ¶

func UndoneUploadTask(c *gin.Context)

func UpdateCurrent ¶

func UpdateCurrent(c *gin.Context)

func UpdateIndex ¶ added in v3.7.1

func UpdateIndex(c *gin.Context)

func UpdateMeta ¶

func UpdateMeta(c *gin.Context)

func UpdateStorage ¶

func UpdateStorage(c *gin.Context)

func UpdateUser ¶

func UpdateUser(c *gin.Context)

func Verify2FA ¶

func Verify2FA(c *gin.Context)

Types ¶

type AddAria2Req ¶

type AddAria2Req struct {
	Urls []string `json:"urls"`
	Path string   `json:"path"`
}

type DirReq ¶

type DirReq struct {
	Path      string `json:"path" form:"path"`
	Password  string `json:"password" form:"password"`
	ForceRoot bool   `json:"force_root" form:"force_root"`
}

type DirResp ¶

type DirResp struct {
	Name     string    `json:"name"`
	Modified time.Time `json:"modified"`
}

type FsGetReq ¶

type FsGetReq struct {
	Path     string `json:"path" form:"path"`
	Password string `json:"password" form:"password"`
}

type FsGetResp ¶

type FsGetResp struct {
	ObjResp
	RawURL   string    `json:"raw_url"`
	Readme   string    `json:"readme"`
	Provider string    `json:"provider"`
	Related  []ObjResp `json:"related"`
}

type FsListResp ¶

type FsListResp struct {
	Content  []ObjResp `json:"content"`
	Total    int64     `json:"total"`
	Readme   string    `json:"readme"`
	Write    bool      `json:"write"`
	Provider string    `json:"provider"`
}

type FsOtherReq ¶

type FsOtherReq struct {
	model.FsOtherArgs
	Password string `json:"password" form:"password"`
}

type ListReq ¶

type ListReq struct {
	model.PageReq
	Path     string `json:"path" form:"path"`
	Password string `json:"password" form:"password"`
	Refresh  bool   `json:"refresh"`
}

type LoginReq ¶

type LoginReq struct {
	Username string `json:"username" binding:"required"`
	Password string `json:"password"`
	OtpCode  string `json:"otp_code"`
}

type MkdirOrLinkReq ¶

type MkdirOrLinkReq struct {
	Path string `json:"path" form:"path"`
}

type MoveCopyReq ¶

type MoveCopyReq struct {
	SrcDir string   `json:"src_dir"`
	DstDir string   `json:"dst_dir"`
	Names  []string `json:"names"`
}

type ObjResp ¶

type ObjResp struct {
	Name     string    `json:"name"`
	Size     int64     `json:"size"`
	IsDir    bool      `json:"is_dir"`
	Modified time.Time `json:"modified"`
	Sign     string    `json:"sign"`
	Thumb    string    `json:"thumb"`
	Type     int       `json:"type"`
}

type RemoveReq ¶

type RemoveReq struct {
	Dir   string   `json:"dir"`
	Names []string `json:"names"`
}

type RenameReq ¶

type RenameReq struct {
	Path string `json:"path"`
	Name string `json:"name"`
}

type SearchReq ¶ added in v3.7.1

type SearchReq struct {
	model.SearchReq
	Password string `json:"password"`
}

type SearchResp ¶ added in v3.6.0

type SearchResp struct {
	model.SearchNode
	Type int `json:"type"`
}

type SetAria2Req ¶

type SetAria2Req struct {
	Uri    string `json:"uri" form:"uri"`
	Secret string `json:"secret" form:"secret"`
}

type TaskInfo ¶

type TaskInfo struct {
	ID       string `json:"id"`
	Name     string `json:"name"`
	State    string `json:"state"`
	Status   string `json:"status"`
	Progress int    `json:"progress"`
	Error    string `json:"error"`
}

type UpdateIndexReq ¶ added in v3.9.0

type UpdateIndexReq struct {
	Paths    []string `json:"paths"`
	MaxDepth int      `json:"max_depth"`
}

type UserResp ¶

type UserResp struct {
	model.User
	Otp bool `json:"otp"`
}

type Verify2FAReq ¶

type Verify2FAReq struct {
	Code   string `json:"code" binding:"required"`
	Secret string `json:"secret" binding:"required"`
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL