surtic86andClaude Opus 5.5
cf73052e0e
Fixes the nine findings of a security audit of 2.4.1. The most important: an anonymous uploader could fill the storage quota without sending data, and a forged X-Forwarded-For header could get around the limits on password attempts. Password attempts now also have a limit per share, per login e-mail and for the system password. Whoever entered the system password enters it once more after the update. Update now: docker compose pull and docker compose up -d. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
31 lines
785 B
PHP
31 lines
785 B
PHP
<?php
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Application
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Only what differs from the framework's config/app.php; Laravel merges
|
|
| every other key from its own defaults.
|
|
|
|
|
*/
|
|
|
|
return [
|
|
|
|
'name' => env('APP_NAME', 'SealShare'),
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| SealShare Version
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The release this code is, shown on the admin dashboard. Bump it together
|
|
| with the release's heading in CHANGELOG.md: tests/Feature/AppVersionTest
|
|
| fails while the two differ.
|
|
|
|
|
*/
|
|
|
|
'version' => '2.4.2',
|
|
|
|
];
|