diff options
| author | Vincent Petry <pvince81@owncloud.com> | 2015-06-11 15:17:15 +0200 |
|---|---|---|
| committer | Vincent Petry <pvince81@owncloud.com> | 2015-06-11 15:17:15 +0200 |
| commit | e5c6a9481f6f50609513e2598b01e162ecc675e3 (patch) | |
| tree | 24671864a16f9134ffb4cd1606b100123891dc51 | |
| parent | dbe344ef3dc3ea643513fce8d76d1979d733c49a (diff) | |
| parent | 4d10dab813b578697aaf856833f1aa334d0ee1a8 (diff) | |
| download | nextcloud-server-e5c6a9481f6f50609513e2598b01e162ecc675e3.tar.gz nextcloud-server-e5c6a9481f6f50609513e2598b01e162ecc675e3.zip | |
Merge pull request #16880 from owncloud/webdav-verify-path
verify path when getting a node for sabredav
| -rw-r--r-- | lib/private/connector/sabre/objecttree.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/private/connector/sabre/objecttree.php b/lib/private/connector/sabre/objecttree.php index c56fd7ee4db..b4acbfaafa7 100644 --- a/lib/private/connector/sabre/objecttree.php +++ b/lib/private/connector/sabre/objecttree.php @@ -104,6 +104,8 @@ class ObjectTree extends \Sabre\DAV\Tree { throw new \Sabre\DAV\Exception\ServiceUnavailable('filesystem not setup'); } + $this->fileView->verifyPath($path, basename($path)); + $path = trim($path, '/'); if (isset($this->cache[$path])) { return $this->cache[$path]; |