diff options
author | Lukas Reschke <lukas@owncloud.com> | 2015-03-17 21:56:16 +0100 |
---|---|---|
committer | Lukas Reschke <lukas@owncloud.com> | 2015-03-17 21:56:16 +0100 |
commit | f13216d275fc59d448e91aab5e817bff5627d3d9 (patch) | |
tree | 692387e0cb84252d145ebcd5f4b291f1390f5487 /lib/private | |
parent | e50f13d46b285c4f74b13d4ad9107cedf23311f2 (diff) | |
download | nextcloud-server-f13216d275fc59d448e91aab5e817bff5627d3d9.tar.gz nextcloud-server-f13216d275fc59d448e91aab5e817bff5627d3d9.zip |
Use `FILTER_UNSAFE_RAW` instead of `FILTER_SANITIZE_STRING`
`FILTER_SANITIZE_STRING` will still encode everything else.
Diffstat (limited to 'lib/private')
-rw-r--r-- | lib/private/files/storage/common.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/files/storage/common.php b/lib/private/files/storage/common.php index 031a2f1cb7a..5de243e177a 100644 --- a/lib/private/files/storage/common.php +++ b/lib/private/files/storage/common.php @@ -512,7 +512,7 @@ abstract class Common implements \OC\Files\Storage\Storage { } } - $sanitizedFileName = filter_var($fileName, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_LOW); + $sanitizedFileName = filter_var($fileName, FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_LOW); if($sanitizedFileName !== $fileName) { throw new InvalidCharacterInPathException(); } |