Files is the storage application for Phabricator. Users can upload files directly and the application is also used by other applications for file storage.
Oct 26 2022
There are some remaining non-security bugs with this that I'll follow up on in T13682. I believe the security side of this is now resolved.
The details of this attack will be disclosed at a later date, once installs have had some sort of plausible chance to upgrade.
I filed T13687 as a followup for preventing this particular sort of error (where a Phobject is incorrectly serialized directly).
Jul 8 2022
That's very likely the same problem, and I think it should be fixed by updating to the current stable (rPf2a7db1 or newer).
I believe we may be hitting either the problem one of the above commit fixes, or suffering from a similar caused as side-effect from it.
Jun 14 2022
...ideally this sort of thing should fail loudly at serialization time...
May 27 2022
Mar 15 2021
Mar 11 2021
Resource (and Phame and Phurl) domains now respond to /status/.
Mar 10 2021
This promoted without exploding.
Mar 5 2021
These contexts are covered:
Apr 27 2020
Jan 13 2020
Sep 8 2019
Jul 31 2019
Jul 30 2019
Jun 24 2019
Jun 22 2019
See one followup in T13326. The "import from disk" part seems to have worked properly in production.
Jun 17 2019
Jun 5 2019
May 24 2019
Feb 25 2019
Feb 23 2019
We no longer offer support for this kind of problem (that technically has reproduction steps, but is sufficiently involved to reproduce that no one has time to follow them, e.g. build a new server from scratch with assorted specific software versions).
Jul 23 2018
Thanks! I was able to follow your steps to reproduce this and verify the fix.
Jul 22 2018
Note that the lints and unit tests do pass on my end. I used the "Create Diff" action to do this instead of arc diff (which was silly of me)
Jun 28 2018
Can't wait for "connect 2" to come out on playstation six.