diff options
| author | Joas Schilling <coding@schilljs.com> | 2016-10-14 09:09:21 +0200 |
|---|---|---|
| committer | Joas Schilling <coding@schilljs.com> | 2016-10-19 09:28:54 +0200 |
| commit | 05223a39f9f29181c242cc6952c91b74a70c969a (patch) | |
| tree | 3ed676467a3e9aaaf80c733eaa74d09182ce5835 /apps | |
| parent | 46406f517aa7c07f148d69d69a5f61306d140ec3 (diff) | |
| download | nextcloud-server-05223a39f9f29181c242cc6952c91b74a70c969a.tar.gz nextcloud-server-05223a39f9f29181c242cc6952c91b74a70c969a.zip | |
Make sure we only use numbers as length
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/dav/lib/Connector/Sabre/QuotaPlugin.php | 5 | ||||
| -rw-r--r-- | apps/dav/tests/unit/Connector/Sabre/QuotaPluginTest.php | 6 |
2 files changed, 9 insertions, 2 deletions
diff --git a/apps/dav/lib/Connector/Sabre/QuotaPlugin.php b/apps/dav/lib/Connector/Sabre/QuotaPlugin.php index 0682fca94ea..484bb5129e8 100644 --- a/apps/dav/lib/Connector/Sabre/QuotaPlugin.php +++ b/apps/dav/lib/Connector/Sabre/QuotaPlugin.php @@ -120,12 +120,13 @@ class QuotaPlugin extends \Sabre\DAV\ServerPlugin { public function getLength() { $req = $this->server->httpRequest; $length = $req->getHeader('X-Expected-Entity-Length'); - if (!$length) { + if (!is_numeric($length)) { $length = $req->getHeader('Content-Length'); + $length = is_numeric($length) ? $length : null; } $ocLength = $req->getHeader('OC-Total-Length'); - if ($length && $ocLength) { + if (is_numeric($length) && is_numeric($ocLength)) { return max($length, $ocLength); } diff --git a/apps/dav/tests/unit/Connector/Sabre/QuotaPluginTest.php b/apps/dav/tests/unit/Connector/Sabre/QuotaPluginTest.php index 48c920541a8..89bc1ee8adb 100644 --- a/apps/dav/tests/unit/Connector/Sabre/QuotaPluginTest.php +++ b/apps/dav/tests/unit/Connector/Sabre/QuotaPluginTest.php @@ -132,6 +132,12 @@ class QuotaPluginTest extends \Test\TestCase { array(512, array('CONTENT-LENGTH' => '512')), array(2048, array('OC-TOTAL-LENGTH' => '2048', 'CONTENT-LENGTH' => '1024')), array(4096, array('OC-TOTAL-LENGTH' => '2048', 'X-EXPECTED-ENTITY-LENGTH' => '4096')), + [null, ['X-EXPECTED-ENTITY-LENGTH' => 'A']], + [null, ['CONTENT-LENGTH' => 'A']], + [1024, ['OC-TOTAL-LENGTH' => 'A', 'CONTENT-LENGTH' => '1024']], + [1024, ['OC-TOTAL-LENGTH' => 'A', 'X-EXPECTED-ENTITY-LENGTH' => '1024']], + [null, ['OC-TOTAL-LENGTH' => '2048', 'X-EXPECTED-ENTITY-LENGTH' => 'A']], + [null, ['OC-TOTAL-LENGTH' => '2048', 'CONTENT-LENGTH' => 'A']], ); } |