summaryrefslogtreecommitdiffstats
path: root/settings/ajax/navigationdetect.php
diff options
context:
space:
mode:
authorBart Visscher <bartv@thisnet.nl>2013-02-09 15:03:47 +0100
committerBart Visscher <bartv@thisnet.nl>2013-02-09 15:10:40 +0100
commit9dddcae9ca3dcf872893e36e2f478ebecafdc6e2 (patch)
tree161ce14d97ef95699266ead95da5f5f2bd97fb68 /settings/ajax/navigationdetect.php
parent12bdc6ddb6021f772e8e6364eee89f1406ee3d7d (diff)
downloadnextcloud-server-9dddcae9ca3dcf872893e36e2f478ebecafdc6e2.tar.gz
nextcloud-server-9dddcae9ca3dcf872893e36e2f478ebecafdc6e2.zip
Remove invalid characters from app id to prevent loading of invalid resources
Diffstat (limited to 'settings/ajax/navigationdetect.php')
-rw-r--r--settings/ajax/navigationdetect.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/settings/ajax/navigationdetect.php b/settings/ajax/navigationdetect.php
index 93acb50dc20..607c0e873f9 100644
--- a/settings/ajax/navigationdetect.php
+++ b/settings/ajax/navigationdetect.php
@@ -4,6 +4,7 @@ OC_Util::checkAdminUser();
OCP\JSON::callCheck();
$app = $_GET['app'];
+$app = OC_App::cleanAppId($app);
//load the one app and see what it adds to the navigation
OC_App::loadApp($app);