wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #19360 from nextcloud/backport/19349/stable18

Browse source 
[stable18] Prevent archieved download on secure view
This commit is contained in:
blizzz 2020-02-10 09:32:35 +01:00 committed by GitHub
commit fa8b998b62
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
apps/files_sharing/lib/Controller/ShareController.php
View file

@ -541,11 +541,14 @@ class ShareController extends AuthPublicShareController {
} }
} }
if (!$this->validateShare($share)) { if (!$this->validateShare($share)) {
throw new NotFoundException(); throw new NotFoundException();
} }
if ($share->getHideDownload()) {
return new NotFoundResponse();
}
$userFolder = $this->rootFolder->getUserFolder($share->getShareOwner()); $userFolder = $this->rootFolder->getUserFolder($share->getShareOwner());
$originalSharePath = $userFolder->getRelativePath($share->getNode()->getPath()); $originalSharePath = $userFolder->getRelativePath($share->getNode()->getPath());