diff options
| author | provokateurin <kate@provokateurin.de> | 2024-07-25 13:14:46 +0200 |
|---|---|---|
| committer | provokateurin <kate@provokateurin.de> | 2024-07-27 22:42:51 +0200 |
| commit | 9128a23af11e42c8f77a7e156576b85a14d9f56d (patch) | |
| tree | 4c2e6a9368d9846a8327ff59655439ee892c7707 /apps/files_sharing/lib/Controller/PublicPreviewController.php | |
| parent | 212a621697cd32b65ea78fa90015cec9d9d1dfe3 (diff) | |
| download | nextcloud-server-9128a23af11e42c8f77a7e156576b85a14d9f56d.tar.gz nextcloud-server-9128a23af11e42c8f77a7e156576b85a14d9f56d.zip | |
refactor(files_sharing): Replace security annotations with respective attributes
Signed-off-by: provokateurin <kate@provokateurin.de>
Diffstat (limited to 'apps/files_sharing/lib/Controller/PublicPreviewController.php')
| -rw-r--r-- | apps/files_sharing/lib/Controller/PublicPreviewController.php | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/apps/files_sharing/lib/Controller/PublicPreviewController.php b/apps/files_sharing/lib/Controller/PublicPreviewController.php index 3799cc9bf97..4dc3989f866 100644 --- a/apps/files_sharing/lib/Controller/PublicPreviewController.php +++ b/apps/files_sharing/lib/Controller/PublicPreviewController.php @@ -6,6 +6,8 @@ namespace OCA\Files_Sharing\Controller; use OCP\AppFramework\Http; +use OCP\AppFramework\Http\Attribute\NoCSRFRequired; +use OCP\AppFramework\Http\Attribute\PublicPage; use OCP\AppFramework\Http\DataResponse; use OCP\AppFramework\Http\FileDisplayResponse; use OCP\AppFramework\PublicShareController; @@ -60,9 +62,6 @@ class PublicPreviewController extends PublicShareController { /** - * @PublicPage - * @NoCSRFRequired - * * Get a preview for a shared file * * @param string $token Token of the share @@ -77,6 +76,8 @@ class PublicPreviewController extends PublicShareController { * 403: Getting preview is not allowed * 404: Share or preview not found */ + #[PublicPage] + #[NoCSRFRequired] public function getPreview( string $token, string $file = '', @@ -123,8 +124,6 @@ class PublicPreviewController extends PublicShareController { } /** - * @PublicPage - * @NoCSRFRequired * @NoSameSiteCookieRequired * * Get a direct link preview for a shared file @@ -137,6 +136,8 @@ class PublicPreviewController extends PublicShareController { * 403: Getting preview is not allowed * 404: Share or preview not found */ + #[PublicPage] + #[NoCSRFRequired] public function directLink(string $token) { // No token no image if ($token === '') { |