Viewing profile — rbolte

Released version 1.0.3 which fixes the XSS and path traversal security issues (as well as 3 other issues, see https://github.com/remie/YouTransfer/issues?q=milestone%3A1.... for mo…

Good catch! The XSS error was introduced with the implementation of error handling, but is a really unwanted side effect :) I've created two issues on GitHub ( https://github.com/r…

I'm not familiar with camlistore, but a first glance at the project website tells me that it has way more features and serves a different goal. YouTransfer is basically a very simp…

BTW: if this concerns the youtranfer.io website (instead of the YouTransfer application), I'm actually a bit hesitant to change this. I'm currently using the GitHub site generator …

Good suggestion! I've added an issue on GitHub ( https://github.com/remie/YouTransfer/issues/106 ). BTW: normally the files will expire within a specific timeframe and will be remo…

I'm a bit hesitant to change this as I'm using the GitHub site generator for convenience. There is a limited set of templates available, most of which are either ugly or have reada…

The problem with ACL is that I'm worried it will make the project more complex. I've added an issue on GitHub for future reference ( https://github.com/remie/YouTransfer/issues/105…

Are you referring to the generated GitHub pages on http://youtransfer.io or to the demo instance ( http://demo.youtransfer.io ) which is the actual application?

Basically... yeah, if you do not take any additional security measures, anybody can just "dump" files on your server. You could opt for the S3 storage provider, which will dump the…

Currently, the files are stored as a flat file list on the file system using their randomly generated token to create a [token].json and [token].binary file. The JSON file contains…

:D How about Proxima Nova? ( http://www.marksimonson.com/fonts/view/proxima-nova )

Thanks! I'm glad I could help :)

Any suggestions?

And it's done. The 1.0.2 hotfix is now available with the token generation fix as well as 2 other enhancements.

It's not really related. YouTransfer.io uses DropzoneJS as the file transfer UI for javascript enabled browsers.

I've opted for the 16 bits version right now as it fits better in the UI. There will be an additional issue to deal with improving the bitrate as well as making a suitable UI for i…