summaryrefslogtreecommitdiffstats
path: root/core/vendor
diff options
context:
space:
mode:
authorLukas Reschke <lukas@owncloud.com>2015-05-22 11:53:02 +0200
committerLukas Reschke <lukas@owncloud.com>2015-05-22 11:53:02 +0200
commit8ce3d6ea57a2181afddc03e154495b6ddeb6c6be (patch)
tree2227267b88cf02e3dc224dfac626a2c02845c390 /core/vendor
parent94077caea90e3646c77fdae69ea63fc84e1f8409 (diff)
downloadnextcloud-server-8ce3d6ea57a2181afddc03e154495b6ddeb6c6be.tar.gz
nextcloud-server-8ce3d6ea57a2181afddc03e154495b6ddeb6c6be.zip
End processing when file is not found
We have to end the processing when a file is not found or otherwise the method is proceeding and even sending invalid file paths to the sendfile methods. Due to nginx preventing directory traversals this is luckily not immediately exploitable. We should for hardening purposes however quit the script execution just as we do for 403 cases and others as well.
Diffstat (limited to 'core/vendor')
0 files changed, 0 insertions, 0 deletions