diff options
| author | Robin Appelman <icewind1991@gmail.com> | 2010-09-28 22:14:01 +0200 |
|---|---|---|
| committer | Robin Appelman <icewind1991@gmail.com> | 2010-09-28 22:14:01 +0200 |
| commit | d4fa1ddaa152723eb100bb7c732d624d8305ba2c (patch) | |
| tree | eb9159714320a80ad3e6f32cb54d8152b706686a /files | |
| parent | 2aa50dc5d9e84d257751e201edc34f5600c23145 (diff) | |
| download | nextcloud-server-d4fa1ddaa152723eb100bb7c732d624d8305ba2c.tar.gz nextcloud-server-d4fa1ddaa152723eb100bb7c732d624d8305ba2c.zip | |
fix viewing images that have a ' in the filename
Diffstat (limited to 'files')
| -rw-r--r-- | files/open_file.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/files/open_file.php b/files/open_file.php index e1b82dcd37b..b91f72aaf31 100644 --- a/files/open_file.php +++ b/files/open_file.php @@ -30,6 +30,7 @@ if(strstr($file,'..') or strstr($dir,'..')){ die(); } $filename=$dir.'/'.$file; +$filename=stripslashes($filename); $ftype=OC_FILESYSTEM::getMimeType($filename); ob_end_clean(); header('Content-Type: '.$ftype); |