diff options
author | Ferdinand Thiessen <opensource@fthiessen.de> | 2024-08-27 14:07:44 +0200 |
---|---|---|
committer | Andy Scherzinger <info@andy-scherzinger.de> | 2024-08-28 17:22:20 +0200 |
commit | 17f011f7c50d179cdfe9c6e7566e242c326336f4 (patch) | |
tree | 031d702574f93239aadd4575a41e2d9e816fcc5b /lib/private/Files/FilenameValidator.php | |
parent | 08836696e2234a47e21758fcd208dd42144a7f23 (diff) | |
download | nextcloud-server-17f011f7c50d179cdfe9c6e7566e242c326336f4.tar.gz nextcloud-server-17f011f7c50d179cdfe9c6e7566e242c326336f4.zip |
fix: Also validate parent path in `verifyPath`
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Diffstat (limited to 'lib/private/Files/FilenameValidator.php')
-rw-r--r-- | lib/private/Files/FilenameValidator.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/lib/private/Files/FilenameValidator.php b/lib/private/Files/FilenameValidator.php index 2fe3c93d026..fde45068df7 100644 --- a/lib/private/Files/FilenameValidator.php +++ b/lib/private/Files/FilenameValidator.php @@ -25,6 +25,8 @@ use Psr\Log\LoggerInterface; */ class FilenameValidator implements IFilenameValidator { + public const INVALID_FILE_TYPE = 100; + private IL10N $l10n; /** @@ -269,12 +271,12 @@ class FilenameValidator implements IFilenameValidator { */ protected function checkForbiddenExtension(string $filename): void { $filename = mb_strtolower($filename); - // Check for forbidden filename exten<sions + // Check for forbidden filename extensions $forbiddenExtensions = $this->getForbiddenExtensions(); foreach ($forbiddenExtensions as $extension) { if (str_ends_with($filename, $extension)) { if (str_starts_with($extension, '.')) { - throw new InvalidPathException($this->l10n->t('"%1$s" is a forbidden file type.', [$extension])); + throw new InvalidPathException($this->l10n->t('"%1$s" is a forbidden file type.', [$extension]), self::INVALID_FILE_TYPE); } else { throw new InvalidPathException($this->l10n->t('Filenames must not end with "%1$s".', [$extension])); } |