Someone managed to set a volume URL to https://biigle.de/volumes/VOLUME_ID. First, this should not be possible after #1430 because this URL prepended to a filename will always return 404. Second, add a validation rule to explicitly deny the own domain in volume URLs.
Someone managed to set a volume URL to
https://biigle.de/volumes/VOLUME_ID. First, this should not be possible after #1430 because this URL prepended to a filename will always return 404. Second, add a validation rule to explicitly deny the own domain in volume URLs.