Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore invalid paths in the JS file list #25368

Merged
merged 1 commit into from
Jul 6, 2016

Conversation

PVince81
Copy link
Contributor

@PVince81 PVince81 commented Jul 5, 2016

Please review @ChristophWurst @guruz @georgehrke @VicDeo @DeepDiver1975

You can test this by adding ".." sections in the URL directly, for example:
http://localhost/owncloud/index.php/apps/files/?dir=/../../something

Note that on master you'll have to remove the fileid argument as it takes precedence over the path.

Should be backported to stable9.1 and stable9.

@PVince81 PVince81 added this to the 9.2 milestone Jul 5, 2016
@ChristophWurst
Copy link
Contributor

👍 looks good

@VicDeo
Copy link
Member

VicDeo commented Jul 5, 2016

works 👍

@DeepDiver1975 DeepDiver1975 merged commit 147c672 into master Jul 6, 2016
@DeepDiver1975 DeepDiver1975 deleted the files-ignoreinvalidpath branch July 6, 2016 09:55
@DeepDiver1975 DeepDiver1975 self-assigned this Jul 6, 2016
@DeepDiver1975
Copy link
Member

preparing backports

@DeepDiver1975
Copy link
Member

stable9: #25375
stable9.1: #25374

@lock
Copy link

lock bot commented Aug 5, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators Aug 5, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants