XSS / DOM
CSP blocks inline JS/CSS; DOM sinks audited: innerHTML, eval, document.write.
Open Source Secure Cloud by TRINITY
A hardened File Browser fork.
UnyCloud keeps the File Browser user experience and focuses the fork on a smaller public attack surface, current dependencies, reproducible builds, and explicit browser-side security controls.
Release
v0.9.16 / 2dc083d7
SHA256
Download Linux amd64 binary
Verify checksum
2d3d035538a6ca9240a56242129b5facca0192a8838f148eb9156abc4cd32c67
Login
Nginx rate-limit in front; 429 surfaced; login messages moved to safe Vue toasts.
Supply chain
Go 1.27.0, x/crypto 0.55.0, x/net 0.58.0, DOMPurify 3.4.14, Alpine 3.24.1.
Execution
ReadHeaderTimeout and IdleTimeout set; symlinks/shares/previews bounded; Brotli served.