diff options
| author | Lukas Reschke <lukas@owncloud.com> | 2016-02-16 13:16:52 +0100 |
|---|---|---|
| committer | Lukas Reschke <lukas@owncloud.com> | 2016-02-18 11:18:36 +0100 |
| commit | 9b3c4e8dc453a674c0f1aee8c60e9d7f24b34e49 (patch) | |
| tree | f8596a0490e5fa72a382233d9ed72606fc79e669 /apps/dav/appinfo | |
| parent | 3a97a0ad7fa14b803c2ecb55faf24607011eae6e (diff) | |
| download | nextcloud-server-9b3c4e8dc453a674c0f1aee8c60e9d7f24b34e49.tar.gz nextcloud-server-9b3c4e8dc453a674c0f1aee8c60e9d7f24b34e49.zip | |
Require CSRF token for non WebDAV authenticated requests
Diffstat (limited to 'apps/dav/appinfo')
| -rw-r--r-- | apps/dav/appinfo/v1/caldav.php | 1 | ||||
| -rw-r--r-- | apps/dav/appinfo/v1/carddav.php | 1 | ||||
| -rw-r--r-- | apps/dav/appinfo/v1/webdav.php | 1 |
3 files changed, 3 insertions, 0 deletions
diff --git a/apps/dav/appinfo/v1/caldav.php b/apps/dav/appinfo/v1/caldav.php index f860ced3877..333e8bbb3c4 100644 --- a/apps/dav/appinfo/v1/caldav.php +++ b/apps/dav/appinfo/v1/caldav.php @@ -30,6 +30,7 @@ use Sabre\CalDAV\CalendarRoot; $authBackend = new Auth( \OC::$server->getSession(), \OC::$server->getUserSession(), + \OC::$server->getRequest(), 'principals/' ); $principalBackend = new Principal( diff --git a/apps/dav/appinfo/v1/carddav.php b/apps/dav/appinfo/v1/carddav.php index e0c79c75b72..54f0d259bb9 100644 --- a/apps/dav/appinfo/v1/carddav.php +++ b/apps/dav/appinfo/v1/carddav.php @@ -32,6 +32,7 @@ use Sabre\CardDAV\Plugin; $authBackend = new Auth( \OC::$server->getSession(), \OC::$server->getUserSession(), + \OC::$server->getRequest(), 'principals/' ); $principalBackend = new Principal( diff --git a/apps/dav/appinfo/v1/webdav.php b/apps/dav/appinfo/v1/webdav.php index 3d3e51e84bc..211ffabef84 100644 --- a/apps/dav/appinfo/v1/webdav.php +++ b/apps/dav/appinfo/v1/webdav.php @@ -41,6 +41,7 @@ $serverFactory = new \OCA\DAV\Connector\Sabre\ServerFactory( $authBackend = new \OCA\DAV\Connector\Sabre\Auth( \OC::$server->getSession(), \OC::$server->getUserSession(), + \OC::$server->getRequest(), 'principals/' ); $requestUri = \OC::$server->getRequest()->getRequestUri(); |