diff options
| author | Vincent Petry <vincent@nextcloud.com> | 2022-12-16 17:27:15 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-12-16 17:27:15 +0100 |
| commit | 3b7cc31f64d7feae07b424f977f6963d12da012d (patch) | |
| tree | 3910f08a83f9beaa89a4de3d80de03a45192ef48 /lib/private/Files/Cache | |
| parent | 4f2923862ad7d499684571ded196f2d2fc85344a (diff) | |
| parent | f76b4473ee8ecb90181b300c648fabef76106cd8 (diff) | |
| download | nextcloud-server-3b7cc31f64d7feae07b424f977f6963d12da012d.tar.gz nextcloud-server-3b7cc31f64d7feae07b424f977f6963d12da012d.zip | |
Merge pull request #34924 from nextcloud/cache-jail-path-prefix
escape path prefix when doing cache jail search
Diffstat (limited to 'lib/private/Files/Cache')
| -rw-r--r-- | lib/private/Files/Cache/Wrapper/CacheJail.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/Files/Cache/Wrapper/CacheJail.php b/lib/private/Files/Cache/Wrapper/CacheJail.php index c0a6acd118b..628ca3ee0e0 100644 --- a/lib/private/Files/Cache/Wrapper/CacheJail.php +++ b/lib/private/Files/Cache/Wrapper/CacheJail.php @@ -317,7 +317,7 @@ class CacheJail extends CacheWrapper { new SearchBinaryOperator(ISearchBinaryOperator::OPERATOR_OR, [ new SearchComparison(ISearchComparison::COMPARE_EQUAL, 'path', $this->getGetUnjailedRoot()), - new SearchComparison(ISearchComparison::COMPARE_LIKE_CASE_SENSITIVE, 'path', $this->getGetUnjailedRoot() . '/%'), + new SearchComparison(ISearchComparison::COMPARE_LIKE_CASE_SENSITIVE, 'path', SearchComparison::escapeLikeParameter($this->getGetUnjailedRoot()) . '/%'), ], ) ] |