🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序,使用 Gin 和 Solidjs。
Go to file
千石 d0cec67718
Some checks failed
auto_lang / auto generate lang.json (1.25, ubuntu-latest) (push) Has been cancelled
beta release / Beta Release Changelog (1.21, ubuntu-latest) (push) Has been cancelled
build / Build (ubuntu-latest, android-arm64) (push) Has been cancelled
build / Build (ubuntu-latest, darwin-amd64) (push) Has been cancelled
build / Build (ubuntu-latest, darwin-arm64) (push) Has been cancelled
build / Build (ubuntu-latest, linux-amd64-musl) (push) Has been cancelled
build / Build (ubuntu-latest, linux-arm64-musl) (push) Has been cancelled
build / Build (ubuntu-latest, windows-amd64) (push) Has been cancelled
build / Build (ubuntu-latest, windows-arm64) (push) Has been cancelled
release_docker / Build Binaries for Docker Release (push) Has been cancelled
beta release / Beta Release (md5, !(*musl*|*windows-arm64*|*android*|*freebsd*)) (push) Has been cancelled
beta release / Beta Release (md5-android, android-*) (push) Has been cancelled
beta release / Beta Release (md5-freebsd, freebsd-*) (push) Has been cancelled
beta release / Beta Release (md5-linux-musl, linux-!(arm*)-musl*) (push) Has been cancelled
beta release / Beta Release (md5-linux-musl-arm, linux-arm*-musl*) (push) Has been cancelled
beta release / Beta Release (md5-windows-arm64, windows-arm64) (push) Has been cancelled
beta release / Beta Release Desktop (push) Has been cancelled
release_docker / Release Docker image (, latest, ) (push) Has been cancelled
release_docker / Release Docker image (INSTALL_ARIA2=true, aria2, suffix=-aria2,onlatest=true) (push) Has been cancelled
release_docker / Release Docker image (INSTALL_FFMPEG=true INSTALL_ARIA2=true , aio, suffix=-aio,onlatest=true) (push) Has been cancelled
release_docker / Release Docker image (INSTALL_FFMPEG=true, ffmpeg, suffix=-ffmpeg,onlatest=true) (push) Has been cancelled
fix(lanzou): handle acw_sc__v2 anti-crawler challenge on all requests (#9548)
The acw_sc__v2 challenge can be served on any pan.lanzoui.com request
(share page, iframe page, ajaxm.php), but it was only handled for the
first share page. This caused intermittent failures:

- "uid variable not find" when mydisk.php returned the challenge on init
- "not find data" when the iframe download page returned the challenge
- empty "failed get link" when ajaxm.php POST returned the challenge
  (the challenge HTML was parsed as JSON, zt=0 -> empty info)

Also fix HexXor, which was broken since the driver was introduced and
made every challenge unsolvable:

- bytes.NewBuffer(make([]byte, len(hex1))) prefixed the result with
  len(hex1) null bytes
- missing zero-padding produced a single hex char when xor result < 0x10,
  misaligning the whole string

Move the challenge solve/retry loop down into request() so every GET/POST
transparently handles it, and simplify getHtml accordingly.
2026-06-01 20:39:37 +08:00
.github chore(auto_lang): update Go version in auto_lang workflow 2026-05-15 18:50:59 +08:00
cmd fix(mcp): initialize task manager so async fs operations don't panic 2026-05-29 09:37:25 +08:00
drivers fix(lanzou): handle acw_sc__v2 anti-crawler challenge on all requests (#9548) 2026-06-01 20:39:37 +08:00
internal Merge pull request #9545 from AlistGo/fix/net-buf-close-race-9537 2026-06-01 14:09:00 +08:00
pkg fix(fs): block path traversal in handlers 2026-01-30 16:06:51 +08:00
public fix: embed all files of dist 2024-02-03 19:44:50 +08:00
server feat(api): add virtual_path field on fs/list and fs/get responses 2026-05-29 10:33:43 +08:00
wrapper feat: add windows/arm64 target (close #3308) 2023-02-09 19:52:40 +08:00
.air.toml feat: add doge driver (#6201) 2024-03-25 22:53:44 +08:00
.gitignore feat: add doge driver (#6201) 2024-03-25 22:53:44 +08:00
build.sh fix: dead link 2025-06-27 23:58:52 +08:00
CODE_OF_CONDUCT.md docs: Create CODE_OF_CONDUCT.md [skip ci] 2022-09-10 22:23:05 +08:00
CONTRIBUTING.md docs: update go version 2023-07-27 18:32:33 +08:00
docker-compose.yml feat!: listen to both http & https (#4536) 2023-06-11 18:17:37 +08:00
Dockerfile fix(docker_release): avoid duplicate occupation in docker image (#8393 close #8388) 2025-04-19 14:26:19 +08:00
Dockerfile.ci Update Dockerfile.ci (#9230) 2025-07-29 18:35:47 +08:00
entrypoint.sh fix: shebang of entrypoint.sh (#8408) 2025-04-27 19:56:34 +08:00
go.mod fix: CVE-2026-34986 security vulnerability 2026-05-22 09:29:48 +00:00
go.sum fix: CVE-2026-34986 security vulnerability 2026-05-22 09:29:48 +00:00
LICENSE chore: add windows bin to gitignore 2022-04-18 18:31:10 +08:00
main.go feat: use cobra and add some command 2022-08-07 13:09:59 +08:00
README_cn.md feat(drivers): add ProtonDrive driver (#9331) 2025-09-30 14:18:58 +08:00
README_ja.md feat(drivers): add ProtonDrive driver (#9331) 2025-09-30 14:18:58 +08:00
README.md feat(drivers): add ProtonDrive driver (#9331) 2025-09-30 14:18:58 +08:00
renovate.json fix(deps): update dependencies by renovate[bot] (#2344) 2022-11-17 08:49:15 +08:00

logo

🗂️A file list program that supports multiple storages, powered by Gin and Solidjs.


English | 中文 | 日本語 | Contributing | CODE_OF_CONDUCT

Features

Document

https://alistgo.com/

API Documentation (via Apifox):

https://alist-public.apifox.cn/

Demo

https://al.nn.ci

Discussion

Please go to our discussion forum for general questions, issues are for bug reports and feature requests only.

Sponsor

AList is an open-source software, if you happen to like this project and want me to keep going, please consider sponsoring me or providing a single donation! Thanks for all the love and support: https://alistgo.com/guide/sponsor.html

Special sponsors

  • VidHub - An elegant cloud video player within the Apple ecosystem. Support for iPhone, iPad, Mac, and Apple TV.

Contributors

Thanks goes to these wonderful people:

Contributors

License

The AList is open-source software licensed under the AGPL-3.0 license.

Disclaimer

  • This program is a free and open source project. It is designed to share files on the network disk, which is convenient for downloading and learning Golang. Please abide by relevant laws and regulations when using it, and do not abuse it;
  • This program is implemented by calling the official sdk/interface, without destroying the official interface behavior;
  • This program only does 302 redirect/traffic forwarding, and does not intercept, store, or tamper with any user data;
  • Before using this program, you should understand and bear the corresponding risks, including but not limited to account ban, download speed limit, etc., which is none of this program's business;
  • If there is any infringement, please contact me by email, and it will be dealt with in time.

@GitHub · @TelegramGroup · @Discord