]> source.dussan.org Git - nextcloud-server.git/commit
projects / nextcloud-server.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 942ca72) | patch
Exclude more invalid chars from files UI path
authorVincent Petry <pvince81@owncloud.com>
Mon, 24 Oct 2016 12:30:49 +0000 (14:30 +0200)
committerVincent Petry <pvince81@owncloud.com>
Tue, 25 Oct 2016 09:40:45 +0000 (11:40 +0200)
commite7acbce27fa0ef1c6fe216ca67c72d86484919a4
treeaea6104529acd5b51ec23912d1a3e8922711dfcdtree | snapshot
parent942ca725e43f7eed1a3481b5e8a68b16efa76e1acommit | diff
Exclude more invalid chars from files UI path

Prevent newlines and zero byte chars to be used in files UI URL and
redirect to root if one is detected.

Added additional hardening in case the request fails with 400 or the
XMLHttpRequest throw a DOMException, both can happen with invalid paths
as well.
apps/files/js/filelist.js diff | blob | history
apps/files/tests/js/filelistSpec.js diff | blob | history
Nextcloud server, a safe home for all your data: https://github.com/nextcloud/server