wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #19349 from nextcloud/bugfix/noid/prevent-download-on-secure-view

Browse source 
Prevent archieved download on secure view
This commit is contained in:
Roeland Jago Douma 2020-02-08 10:18:24 +01:00 committed by GitHub
commit 302ea0650e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
apps/files_sharing/lib/Controller/ShareController.php
View file

@ -541,11 +541,14 @@ class ShareController extends AuthPublicShareController {
}
}
if (!$this->validateShare($share)) {
throw new NotFoundException();
}
if ($share->getHideDownload()) {
return new NotFoundResponse();
}
$userFolder = $this->rootFolder->getUserFolder($share->getShareOwner());
$originalSharePath = $userFolder->getRelativePath($share->getNode()->getPath());