aboutsummaryrefslogtreecommitdiffstats
path: root/apps/dav/appinfo/v1
diff options
context:
space:
mode:
authorJohn Molakvoæ <skjnldsv@protonmail.com>2024-01-16 17:31:26 +0100
committerJohn Molakvoæ <skjnldsv@users.noreply.github.com>2024-01-17 09:05:11 +0100
commit20a0b9cbaf16fe069e3278388b32efed10bc4ae6 (patch)
tree4184cb33a491bd321228f960e51e9272830ca697 /apps/dav/appinfo/v1
parentad12af8d06dfffe3e8d6b4a255aa96fc2c719136 (diff)
downloadnextcloud-server-20a0b9cbaf16fe069e3278388b32efed10bc4ae6.tar.gz
nextcloud-server-20a0b9cbaf16fe069e3278388b32efed10bc4ae6.zip
fix(dav): ajax request check on public remote endpoints
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
Diffstat (limited to 'apps/dav/appinfo/v1')
-rw-r--r--apps/dav/appinfo/v1/publicwebdav.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/dav/appinfo/v1/publicwebdav.php b/apps/dav/appinfo/v1/publicwebdav.php
index b5a88afb16e..8aa084a1114 100644
--- a/apps/dav/appinfo/v1/publicwebdav.php
+++ b/apps/dav/appinfo/v1/publicwebdav.php
@@ -73,7 +73,7 @@ $linkCheckPlugin = new \OCA\DAV\Files\Sharing\PublicLinkCheckPlugin();
$filesDropPlugin = new \OCA\DAV\Files\Sharing\FilesDropPlugin();
$server = $serverFactory->createServer($baseuri, $requestUri, $authPlugin, function (\Sabre\DAV\Server $server) use ($authBackend, $linkCheckPlugin, $filesDropPlugin) {
- $isAjax = (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] === 'XMLHttpRequest');
+ $isAjax = in_array('XMLHttpRequest', explode(',', $_SERVER['HTTP_X_REQUESTED_WITH'] ?? ''));
/** @var \OCA\FederatedFileSharing\FederatedShareProvider $shareProvider */
$federatedShareProvider = \OC::$server->query(\OCA\FederatedFileSharing\FederatedShareProvider::class);
if ($federatedShareProvider->isOutgoingServer2serverShareEnabled() === false && !$isAjax) {