Implemented AGPL MinIO Object Browser simplified Console by bexsoft · Pull Request #3509 · minio/object-browser

1 min read Original article ↗

We initially explored a basic admin UI for the community branch but haven't actively maintained it. Building and supporting separate graphical consoles for the community and commercial branches is substantial. Honestly, it is hard to duplicate this work for the community branch. A whole team is involved in console development alone, including design, UX, front-end, back-end, and pen testing. This commit introduces an enhanced object browser but removes the unmaintained admin UI code.

Unlike the S3 RESTful APIs, admin actions in the console lack equivalent security protections. Without dedicated maintenance, this code risks introducing security vulnerabilities and creating misleading expectations for the community. For context, see past issues like the "Console Filename Masking Vulnerability" and "Metadata Bucket Name Bypass."

We're open to community contributions! If anyone is interested in taking on long-term development and security for the management console, we warmly welcome your pull requests.