diff options
| author | Robin Appelman <robin@icewind.nl> | 2020-03-12 19:45:23 +0100 |
|---|---|---|
| committer | Robin Appelman <robin@icewind.nl> | 2020-03-12 19:45:23 +0100 |
| commit | 0d112d7901983a568f6a803f59f240afd434db61 (patch) | |
| tree | f5e89f7532e42ed660efda197693a5745085906a /apps/files_external/lib/Controller/UserStoragesController.php | |
| parent | 24d0fb9fcd8b190b6c16c4608c95785036b1eb31 (diff) | |
| download | nextcloud-server-0d112d7901983a568f6a803f59f240afd434db61.tar.gz nextcloud-server-0d112d7901983a568f6a803f59f240afd434db61.zip | |
Use placeholder values for password fields in external storage webui
This prevents the password from being sent to the webui.
While an admin will always be able to retrieve the passwords (as they
can do arbitrairy code execution by design) this prevents casual
password snooping
Signed-off-by: Robin Appelman <robin@icewind.nl>
Diffstat (limited to 'apps/files_external/lib/Controller/UserStoragesController.php')
| -rw-r--r-- | apps/files_external/lib/Controller/UserStoragesController.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/apps/files_external/lib/Controller/UserStoragesController.php b/apps/files_external/lib/Controller/UserStoragesController.php index 6f55af96d1d..46285c4758a 100644 --- a/apps/files_external/lib/Controller/UserStoragesController.php +++ b/apps/files_external/lib/Controller/UserStoragesController.php @@ -148,7 +148,7 @@ class UserStoragesController extends StoragesController { $this->updateStorageStatus($newStorage); return new DataResponse( - $newStorage, + $this->formatStorageForUI($newStorage), Http::STATUS_CREATED ); } @@ -208,7 +208,7 @@ class UserStoragesController extends StoragesController { $this->updateStorageStatus($storage, $testOnly); return new DataResponse( - $storage, + $this->formatStorageForUI($storage), Http::STATUS_OK ); |