Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

check anonymous OPTIONS requests file in root (not in subdir) #13354

Merged
merged 1 commit into from
Jan 4, 2019

Conversation

BastienDurel
Copy link
Contributor

Don't allow anonymous OPTIONS to sub directories, so we won't send 404's when client is expecting 401 before authenticate.

@rullzer
Copy link
Member

rullzer commented Jan 4, 2019

Can you point me to the part of the RFC that says we should not allow options in subdirs?

@BastienDurel
Copy link
Contributor Author

BastienDurel commented Jan 4, 2019

I cannot, but as the "real" tree is not used, all OPTIONS returns 404's
(I mean, in OPTIONS requests in subdirs)

@rullzer
Copy link
Member

rullzer commented Jan 4, 2019

Ah it is just for anonymous options... right 👍

@rullzer rullzer added the 3. to review Waiting for reviews label Jan 4, 2019
@rullzer rullzer added this to the Nextcloud 16 milestone Jan 4, 2019
Signed-off-by: Bastien Durel <bastien@durel.org>
Copy link
Member

@MorrisJobke MorrisJobke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code makes sense 👍

@MorrisJobke
Copy link
Member

CI failures are unrelated -> merging.

@MorrisJobke MorrisJobke merged commit aaba0ad into nextcloud:stable15 Jan 4, 2019
@welcome
Copy link

welcome bot commented Jan 4, 2019

Thanks for your first pull request and welcome to the community! Feel free to keep them coming! If you are looking for issues to tackle then have a look at this selection: https://github.com/nextcloud/server/issues?q=is%3Aopen+is%3Aissue+label%3A%22good+first+issue%22
Most developers hang out on IRC. So join #nextcloud-dev on Freenode for a chat!

@MorrisJobke MorrisJobke mentioned this pull request Jan 4, 2019
3 tasks
@rullzer
Copy link
Member

rullzer commented Jan 4, 2019

/backport to stable15

@backportbot-nextcloud
Copy link

The backport to stable15 failed. Please do this backport manually.

@BastienDurel
Copy link
Contributor Author

The PR targeted stable15 already

@MorrisJobke
Copy link
Member

/backport to master

@backportbot-nextcloud
Copy link

backport to master in #13362

@georgehrke
Copy link
Member

/backport to stable14

@georgehrke
Copy link
Member

The branch that introduced this bug was back ported to 14, back porting the fix to 14 as well: #12639

@backportbot-nextcloud
Copy link

backport to stable14 in #13558

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants