From 1c16d012ab34b8965c1b6d558e534a471f40d518 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Sat, 19 Jul 2014 10:17:24 +0200 Subject: [PATCH] Remove uneeded `strip_tags` This `strip_tags` seems to be completely unneeded and will cause problems with passwords containing stripped characters. (e.g. `<` or `>`) Needs https://github.com/owncloud/core/pull/9735 to be merged first. --- lib/base.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/base.php b/lib/base.php index 24381611001..730cee5231d 100644 --- a/lib/base.php +++ b/lib/base.php @@ -807,8 +807,8 @@ class OC { foreach ($vars as $var) { if (isset($_SERVER[$var]) && preg_match('/Basic\s+(.*)$/i', $_SERVER[$var], $matches)) { list($name, $password) = explode(':', base64_decode($matches[1]), 2); - $_SERVER['PHP_AUTH_USER'] = strip_tags($name); - $_SERVER['PHP_AUTH_PW'] = strip_tags($password); + $_SERVER['PHP_AUTH_USER'] = $name; + $_SERVER['PHP_AUTH_PW'] = $password; break; } } -- 2.39.5