]> source.dussan.org Git - nextcloud-server.git/commitdiff
Do not disclose share owner in public file list
authorVincent Petry <pvince81@owncloud.com>
Mon, 26 Jan 2015 16:10:58 +0000 (17:10 +0100)
committerVincent Petry <pvince81@owncloud.com>
Mon, 26 Jan 2015 18:55:48 +0000 (19:55 +0100)
apps/files_sharing/ajax/list.php

index 073c86365bec568203678729103331c0ecf3bfa3..657c6f75da5ebe5f386cd7adab8d99380fb316fe 100644 (file)
@@ -64,7 +64,10 @@ $files = \OCA\Files\Helper::getFiles($dir, $sortAttribute, $sortDirection);
 $formattedFiles = array();
 foreach ($files as $file) {
        $entry = \OCA\Files\Helper::formatFileInfo($file);
-       unset($entry['directory']); // for now
+       // for now
+       unset($entry['directory']);
+       // do not disclose share owner
+       unset($entry['shareOwner']);
        $entry['permissions'] = \OCP\Constants::PERMISSION_READ;
        $formattedFiles[] = $entry;
 }