From: Vincent Petry <pvince81@owncloud.com>
Date: Mon, 26 Jan 2015 16:10:58 +0000 (+0100)
Subject: Do not disclose share owner in public file list
X-Git-Tag: v8.0.0RC1~30^2
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=efcd89cb18ea9e553d1d7a52f35cd61b499cf184;p=nextcloud-server.git

Do not disclose share owner in public file list
---

diff --git a/apps/files_sharing/ajax/list.php b/apps/files_sharing/ajax/list.php
index 073c86365be..657c6f75da5 100644
--- a/apps/files_sharing/ajax/list.php
+++ b/apps/files_sharing/ajax/list.php
@@ -64,7 +64,10 @@ $files = \OCA\Files\Helper::getFiles($dir, $sortAttribute, $sortDirection);
 $formattedFiles = array();
 foreach ($files as $file) {
 	$entry = \OCA\Files\Helper::formatFileInfo($file);
-	unset($entry['directory']); // for now
+	// for now
+	unset($entry['directory']);
+	// do not disclose share owner
+	unset($entry['shareOwner']);
 	$entry['permissions'] = \OCP\Constants::PERMISSION_READ;
 	$formattedFiles[] = $entry;
 }