]> source.dussan.org Git - nextcloud-server.git/commit
projects / nextcloud-server.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 05a03dd) | patch
fix(ContactsStore): Sanitize user ID given to guest avatar route 43317/head
authorFerdinand Thiessen <opensource@fthiessen.de>
Sat, 3 Feb 2024 10:32:51 +0000 (11:32 +0100)
committerFerdinand Thiessen <opensource@fthiessen.de>
Sat, 3 Feb 2024 10:32:51 +0000 (11:32 +0100)
commit2c8aee8f99c20a8ff7b8fdcdaf152aa86b549540
treee63005e34cfc3811c5be37c060d60e0da50d00aetree | snapshot
parent05a03dd663472fee3f4644cdb6a2d11c09703631commit | diff
fix(ContactsStore): Sanitize user ID given to guest avatar route

It is not allowed to use slashes within path parameters, so they would need to be encoded.
But URL encoded slashes are not suported by Apache, so instead replace slash with space.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
lib/private/Contacts/ContactsMenu/ContactsStore.php diff | blob | history
Nextcloud server, a safe home for all your data: https://github.com/nextcloud/server