diff options
| author | Morris Jobke <morris.jobke@gmail.com> | 2013-11-25 00:30:06 -0800 |
|---|---|---|
| committer | Morris Jobke <morris.jobke@gmail.com> | 2013-11-25 00:30:06 -0800 |
| commit | b82146eeee2c969a53dd42cebf06ecfd31a0e286 (patch) | |
| tree | 069b4ddfbae3320740de6aa00445ba17a120c528 /apps/files_external/lib | |
| parent | 60e2ee631a9853a80506d547630e58a6efeace01 (diff) | |
| parent | 2d947835b94362982c98caba68aa1073ab466249 (diff) | |
| download | nextcloud-server-b82146eeee2c969a53dd42cebf06ecfd31a0e286.tar.gz nextcloud-server-b82146eeee2c969a53dd42cebf06ecfd31a0e286.zip | |
Merge pull request #5991 from owncloud/extstorage-mountpointvalidation
Prevent using root as mount point for external storage
Diffstat (limited to 'apps/files_external/lib')
| -rwxr-xr-x | apps/files_external/lib/config.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/apps/files_external/lib/config.php b/apps/files_external/lib/config.php index 43643076519..aaa6c5be1a0 100755 --- a/apps/files_external/lib/config.php +++ b/apps/files_external/lib/config.php @@ -266,6 +266,11 @@ class OC_Mount_Config { $mountType, $applicable, $isPersonal = false) { + $mountPoint = OC\Files\Filesystem::normalizePath($mountPoint); + if ($mountPoint === '' || $mountPoint === '/' || $mountPoint == '/Shared') { + // can't mount at root or "Shared" folder + return false; + } if ($isPersonal) { // Verify that the mount point applies for the current user // Prevent non-admin users from mounting local storage |