From efcd89cb18ea9e553d1d7a52f35cd61b499cf184 Mon Sep 17 00:00:00 2001 From: Vincent Petry Date: Mon, 26 Jan 2015 17:10:58 +0100 Subject: [PATCH] Do not disclose share owner in public file list --- apps/files_sharing/ajax/list.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/apps/files_sharing/ajax/list.php b/apps/files_sharing/ajax/list.php index 073c86365b..657c6f75da 100644 --- a/apps/files_sharing/ajax/list.php +++ b/apps/files_sharing/ajax/list.php @@ -64,7 +64,10 @@ $files = \OCA\Files\Helper::getFiles($dir, $sortAttribute, $sortDirection); $formattedFiles = array(); foreach ($files as $file) { $entry = \OCA\Files\Helper::formatFileInfo($file); - unset($entry['directory']); // for now + // for now + unset($entry['directory']); + // do not disclose share owner + unset($entry['shareOwner']); $entry['permissions'] = \OCP\Constants::PERMISSION_READ; $formattedFiles[] = $entry; }