summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorThomas Müller <thomas.mueller@tmit.eu>2015-11-30 11:20:30 +0100
committerThomas Müller <thomas.mueller@tmit.eu>2015-11-30 11:20:30 +0100
commita94819f4a47ba98b185c9c75eab43d8cb933ed5c (patch)
tree14cccef71708a3d4753e52c1d6f7b8ab1051fe14 /lib
parent9c1dbaf0ad73bc84e41db964b319d7b2842ac7ae (diff)
parentf3e9106864421d902cb3751fdd0004f84b369938 (diff)
downloadnextcloud-server-a94819f4a47ba98b185c9c75eab43d8cb933ed5c.tar.gz
nextcloud-server-a94819f4a47ba98b185c9c75eab43d8cb933ed5c.zip
Merge pull request #20809 from owncloud/dont-trust-update-server-message
Don't trust update server
Diffstat (limited to 'lib')
-rw-r--r--lib/private/templatelayout.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/private/templatelayout.php b/lib/private/templatelayout.php
index 7d16823d2a8..f5974128b73 100644
--- a/lib/private/templatelayout.php
+++ b/lib/private/templatelayout.php
@@ -85,7 +85,9 @@ class OC_TemplateLayout extends OC_Template {
if(isset($data['version']) && $data['version'] != '' and $data['version'] !== Array()) {
$this->assign('updateAvailable', true);
$this->assign('updateVersion', $data['versionstring']);
- $this->assign('updateLink', $data['web']);
+ if(substr($data['web'], 0, 8) === 'https://') {
+ $this->assign('updateLink', $data['web']);
+ }
\OCP\Util::addScript('core', 'update-notification');
} else {
$this->assign('updateAvailable', false); // No update available or not an admin user