Prevent archieved download on secure view

Signed-off-by: Joas Schilling <coding@schilljs.com>

diff --git a/apps/files_sharing/lib/Controller/ShareController.php b/apps/files_sharing/lib/Controller/ShareController.php
index 1542cbe4924600db285d380334f38a5955f034b7..96dff4dddbf958dc3546cf1a160818cf6546030b 100644 (file)
--- a/apps/files_sharing/lib/Controller/ShareController.php
+++ b/apps/files_sharing/lib/Controller/ShareController.php
@@ -529,11 +529,14 @@ class ShareController extends AuthPublicShareController {
                        }
                }
 
-
                if (!$this->validateShare($share)) {
                        throw new NotFoundException();
                }
 
+               if ($share->getHideDownload()) {
+                       return new NotFoundResponse();
+               }
+
                $userFolder = $this->rootFolder->getUserFolder($share->getShareOwner());
                $originalSharePath = $userFolder->getRelativePath($share->getNode()->getPath());