diff options
| author | Roeland Jago Douma <roeland@famdouma.nl> | 2015-07-04 07:27:56 +0200 |
|---|---|---|
| committer | Roeland Jago Douma <roeland@famdouma.nl> | 2015-07-04 07:27:56 +0200 |
| commit | cf732c4d274a09597b813582fc2878777da3c36d (patch) | |
| tree | 5b8c4ceaececd4405a61cb437368401fe718bcc0 /apps/files_sharing/ajax | |
| parent | 7959605e4e389ee26705094656f636f23b9cfb8d (diff) | |
| download | nextcloud-server-cf732c4d274a09597b813582fc2878777da3c36d.tar.gz nextcloud-server-cf732c4d274a09597b813582fc2878777da3c36d.zip | |
Do not leak mounttype of a public share
Diffstat (limited to 'apps/files_sharing/ajax')
| -rw-r--r-- | apps/files_sharing/ajax/list.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/apps/files_sharing/ajax/list.php b/apps/files_sharing/ajax/list.php index d09b61fd4ae..9185e508e67 100644 --- a/apps/files_sharing/ajax/list.php +++ b/apps/files_sharing/ajax/list.php @@ -71,6 +71,9 @@ foreach ($files as $file) { unset($entry['directory']); // do not disclose share owner unset($entry['shareOwner']); + // do not disclose if something is a remote shares + unset($entry['mountType']); + unset($entry['icon']); $entry['permissions'] = \OCP\Constants::PERMISSION_READ; $formattedFiles[] = $entry; } |