diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2014-07-19 10:17:24 +0200 |
|---|---|---|
| committer | Thomas Müller <thomas.mueller@tmit.eu> | 2014-07-22 15:43:52 +0200 |
| commit | f99f48e26a60e912fbb84922b7788cff868b43ec (patch) | |
| tree | b616f795a89aceca182625219515afc522aa3760 | |
| parent | 6fb60e9d4abaa12dadf6e17656fe3d10de38e209 (diff) | |
| download | nextcloud-server-f99f48e26a60e912fbb84922b7788cff868b43ec.tar.gz nextcloud-server-f99f48e26a60e912fbb84922b7788cff868b43ec.zip | |
Remove uneeded `strip_tags`
This `strip_tags` seems to be completely unneeded and will cause problems with passwords containing stripped characters. (e.g. `<` or `>`)
Needs https://github.com/owncloud/core/pull/9735 to be merged first.
| -rw-r--r-- | lib/base.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/base.php b/lib/base.php index ac3ad098c9a..b442935599c 100644 --- a/lib/base.php +++ b/lib/base.php @@ -850,8 +850,8 @@ class OC { foreach ($vars as $var) { if (isset($_SERVER[$var]) && preg_match('/Basic\s+(.*)$/i', $_SERVER[$var], $matches)) { list($name, $password) = explode(':', base64_decode($matches[1]), 2); - $_SERVER['PHP_AUTH_USER'] = strip_tags($name); - $_SERVER['PHP_AUTH_PW'] = strip_tags($password); + $_SERVER['PHP_AUTH_USER'] = $name; + $_SERVER['PHP_AUTH_PW'] = $password; break; } } |