Clean application identifier before processing

diff --git a/lib/private/route/router.php b/lib/private/route/router.php
index 9c973d7ac6ae6e10da285ca8ea8b1a6ebc917a40..a6ff51b9b5ec3b67c2c2f59c635f3825968afe22 100644 (file)
--- a/lib/private/route/router.php
+++ b/lib/private/route/router.php
@@ -204,6 +204,8 @@ class Router implements IRouter {
                if (substr($url, 0, 6) === '/apps/') {
                        // empty string / 'apps' / $app / rest of the route
                        list(, , $app,) = explode('/', $url, 4);
+
+                       $app = \OC_App::cleanAppId($app);
                        \OC::$REQUESTEDAPP = $app;
                        $this->loadRoutes($app);
                } else if (substr($url, 0, 6) === '/core/' or substr($url, 0, 10) === '/settings/') {