Check address book URI length before creation

Signed-off-by: Joas Schilling <coding@schilljs.com>
nextcloud · Sep 15, 2022 · 992e05e · 992e05e
1 parent ad0fca4
commit 992e05e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/apps/dav/lib/CardDAV/CardDavBackend.php b/apps/dav/lib/CardDAV/CardDavBackend.php
@@ -416,6 +416,10 @@ public function updateAddressBook($addressBookId, \Sabre\DAV\PropPatch $propPatc
 	 * @throws BadRequest
 	 */
 	public function createAddressBook($principalUri, $url, array $properties) {
+		if (strlen($url) > 255) {
+			throw new BadRequest('URI too long. Address book not created');
+		}
+
 		$values = [
 			'displayname' => null,
 			'description' => null,