diff options
author | Bart Visscher <bartv@thisnet.nl> | 2013-02-09 15:03:47 +0100 |
---|---|---|
committer | Bart Visscher <bartv@thisnet.nl> | 2013-02-09 15:10:40 +0100 |
commit | 9dddcae9ca3dcf872893e36e2f478ebecafdc6e2 (patch) | |
tree | 161ce14d97ef95699266ead95da5f5f2bd97fb68 /settings/ajax/navigationdetect.php | |
parent | 12bdc6ddb6021f772e8e6364eee89f1406ee3d7d (diff) | |
download | nextcloud-server-9dddcae9ca3dcf872893e36e2f478ebecafdc6e2.tar.gz nextcloud-server-9dddcae9ca3dcf872893e36e2f478ebecafdc6e2.zip |
Remove invalid characters from app id to prevent loading of invalid resources
Diffstat (limited to 'settings/ajax/navigationdetect.php')
-rw-r--r-- | settings/ajax/navigationdetect.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/settings/ajax/navigationdetect.php b/settings/ajax/navigationdetect.php index 93acb50dc20..607c0e873f9 100644 --- a/settings/ajax/navigationdetect.php +++ b/settings/ajax/navigationdetect.php @@ -4,6 +4,7 @@ OC_Util::checkAdminUser(); OCP\JSON::callCheck(); $app = $_GET['app']; +$app = OC_App::cleanAppId($app); //load the one app and see what it adds to the navigation OC_App::loadApp($app); |