The share / public router would expose the parse error of JWTs when serving images, leading to unnecesasry information disclosure. Replace any error with a generic "invalid request" as is already done when serving the streams themselves. |
||
|---|---|---|
| .. | ||
| handle_downloads.go | ||
| handle_images.go | ||
| handle_images_test.go | ||
| handle_shares.go | ||
| handle_streams.go | ||
| public.go | ||
| public_suite_test.go | ||