-
-
Notifications
You must be signed in to change notification settings - Fork 4.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
check anonymous OPTIONS requests file in root (not in subdir) #13354
Conversation
454f613
to
21f93ce
Compare
Can you point me to the part of the RFC that says we should not allow options in subdirs? |
I cannot, but as the "real" tree is not used, all OPTIONS returns 404's |
Ah it is just for anonymous options... right 👍 |
Signed-off-by: Bastien Durel <bastien@durel.org>
21f93ce
to
625380e
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code makes sense 👍
CI failures are unrelated -> merging. |
Thanks for your first pull request and welcome to the community! Feel free to keep them coming! If you are looking for issues to tackle then have a look at this selection: https://github.com/nextcloud/server/issues?q=is%3Aopen+is%3Aissue+label%3A%22good+first+issue%22 |
/backport to stable15 |
The backport to stable15 failed. Please do this backport manually. |
The PR targeted stable15 already |
/backport to master |
backport to master in #13362 |
/backport to stable14 |
The branch that introduced this bug was back ported to 14, back porting the fix to 14 as well: #12639 |
backport to stable14 in #13558 |
Don't allow anonymous OPTIONS to sub directories, so we won't send 404's when client is expecting 401 before authenticate.