AlistGo / AlistGo/alist

是否默认将路曲密码应用到子文件夹?

Open
#8,494 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
50.2k
Forks
7.9k
Avg merge
7d 21h
Merged PRs (30d)
6

Description

### Please make sure of the following things

- [x] I have read the [documentation](https://alist.nn.ci).
- [x] I'm sure there are no duplicate issues or discussions.
- [x] I'm sure this feature is not implemented.
- [x] I'm sure it's a reasonable and popular requirement.

### Description of the feature / 需求描述

在Alist在路由密码中单层密码的加密仅对单层有效,例如对 A 文件夹的密码锁不对 A/B 生效,任何用户可直接访问b目录绕过a的路由密码,纵使默认禁用了游客,但这种略反直觉的设定是否可能会导致一些潜在的安全问题?尤其是目录名太过简单,而且密码的继承默认是关闭的

### Suggested solution / 实现思路

让密码继承默认为是,或者添加提示/要求上层路由验证

### Additional context / 附件

您可访问 https://bugdemo.70868848.xyz
标注为 bug 2的的字段有复现的提示与环境

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.