wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
server/lib/private
History
Lukas Reschke 8ce3d6ea57 End processing when file is not found 
We have to end the processing when a file is not found or otherwise the method is proceeding and even sending invalid file paths to the sendfile methods.

Due to nginx preventing directory traversals this is luckily not immediately exploitable. We should for hardening purposes however quit the script execution just as we do for 403 cases and others as well.
2015-05-22 11:53:02 +02:00
..
app Scrutinizer Auto-Fixes 2015-05-19 11:23:06 +00:00
appframework Scrutinizer Auto-Fixes 2015-05-19 11:23:06 +00:00
archive Update license headers 2015-03-26 11:44:36 +01:00
assetic Update license headers 2015-03-26 11:44:36 +01:00
backgroundjob Use internally \OCP\ILogger instead of \OC\Log 2015-04-30 11:52:30 +02:00
cache kill OC_FileProxy 💥 2015-04-07 13:30:28 +02:00
command Merge pull request #15129 from owncloud/version-command-bus 2015-03-26 19:55:13 +01:00
connector/sabre Scrutinizer Auto-Fixes 2015-05-19 11:23:06 +00:00
console Only load commands of enabled apps 2015-05-18 12:33:56 +02:00
contacts Update license headers 2015-03-26 11:44:36 +01:00
db Using TRANSACTION_READ_COMMITTED 2015-04-16 11:49:12 +02:00
diagnostics Update license headers 2015-03-26 11:44:36 +01:00
encryption Merge pull request #16085 from owncloud/encryption-module-rename 2015-05-19 11:13:33 +02:00
files Merge pull request #16322 from owncloud/trash-view 2015-05-20 14:44:01 +02:00
group Reduce the complexity of the search queries in the backends to a minimum 2015-05-18 16:39:21 +02:00
hooks Update license headers 2015-03-26 11:44:36 +01:00
http/client Update license headers 2015-03-26 11:44:36 +01:00
l10n fix #15962 2015-04-30 12:44:45 +02:00
legacy Revert "Deprecated \OCP\IAppConfig - add missing methods to IConfig" 2015-03-27 18:50:11 +01:00
lock allow getting the path from the lockedexception 2015-04-30 14:48:42 +02:00
log Merge pull request #16075 from owncloud/skeleton-copy-delay 2015-05-20 13:52:08 +02:00
mail Add "Reply-To" support for mails 2015-04-10 15:05:34 +02:00
memcache use trait for cas polyfill for xcache 2015-04-30 14:48:39 +02:00
ocs Remove unused variables 2015-04-18 16:35:19 +02:00
preview Scale up the font on larger previews 2015-04-15 14:03:40 +02:00
route Replace _method requirement by {g,s}etMethods() 2015-04-19 12:08:29 -04:00
search Scrutinizer Auto-Fixes 2015-05-19 11:23:06 +00:00
security Fix type annotation 2015-04-27 13:31:18 +02:00
session Update license headers 2015-03-26 11:44:36 +01:00
setup Remove unused variables 2015-04-18 16:35:19 +02:00
share Fix the share mail notification when the item is in a folder 2015-05-06 15:44:19 +02:00
tagging Update license headers 2015-03-26 11:44:36 +01:00
template Fix wrong path generation 2015-04-20 11:01:33 +02:00
user Reduce the complexity of the search queries in the backends to a minimum 2015-05-18 16:39:21 +02:00
activitymanager.php Add logic for getting the user from the rss token to the Manager 2015-03-30 15:23:09 +02:00
allconfig.php Make scrutinizer happy 2015-04-01 12:13:49 +02:00
api.php Fix usage of deprecated private constants 2015-04-18 10:30:02 +02:00
app.php Avoid the log entry with the ModuleAlreadyExists exception when enabling the app 2015-05-07 11:00:55 +02:00
appconfig.php Use insertIfNotExists to avoid problems with parallel calls 2015-05-11 12:38:33 +02:00
apphelper.php Update license headers 2015-03-26 11:44:36 +01:00
archive.php Update license headers 2015-03-26 11:44:36 +01:00
arrayparser.php Update license headers 2015-03-26 11:44:36 +01:00
avatar.php Filter potential dangerous filenames for avatars 2015-04-28 16:57:23 +02:00
avatarmanager.php Filter potential dangerous filenames for avatars 2015-04-28 16:57:23 +02:00
cache.php Update license headers 2015-03-26 11:44:36 +01:00
config.php Update license headers 2015-03-26 11:44:36 +01:00
contactsmanager.php Update license headers 2015-03-26 11:44:36 +01:00
databaseexception.php Update license headers 2015-03-26 11:44:36 +01:00
databasesetupexception.php Update license headers 2015-03-26 11:44:36 +01:00
datetimeformatter.php Update license headers 2015-03-26 11:44:36 +01:00
datetimezone.php When guessing the timezone, the offset might only be valid on a given timestamp 2015-04-07 10:13:06 +02:00
db.php fix followup issues with unneeded parameters 2015-04-18 17:02:39 +02:00
defaults.php Add proper versioning for doc URL 2015-05-02 21:05:11 +02:00
eventsource.php Update license headers 2015-03-26 11:44:36 +01:00
filechunking.php kill OC_FileProxy 💥 2015-04-07 13:30:28 +02:00
files.php End processing when file is not found 2015-05-22 11:53:02 +02:00
forbiddenexception.php Update license headers 2015-03-26 11:44:36 +01:00
group.php Update license headers 2015-03-26 11:44:36 +01:00
helper.php Pure numbers are returned as bytes right away 2015-05-08 10:54:54 +02:00
hintexception.php Update license headers 2015-03-26 11:44:36 +01:00
hook.php Throw ServerNotAvailableException always 2015-04-10 14:51:21 +02:00
httphelper.php Update license headers 2015-03-26 11:44:36 +01:00
image.php Update license headers 2015-03-26 11:44:36 +01:00
installer.php Add experimental applications switch 2015-04-03 13:21:24 +02:00
json.php Update license headers 2015-03-26 11:44:36 +01:00
l10n.php Some locales need to be converted to be compliant with CLDR 2015-05-08 23:45:07 +02:00
largefilehelper.php Update license headers 2015-03-26 11:44:36 +01:00
log.php Conditional logging 2015-05-08 15:58:33 +02:00
mimetypes.list.php Introducing media types for yml, yaml, cnf, conf 2015-04-02 21:37:57 +02:00
naturalsort.php Update license headers 2015-03-26 11:44:36 +01:00
naturalsort_defaultcollator.php Update license headers 2015-03-26 11:44:36 +01:00
navigationmanager.php Update license headers 2015-03-26 11:44:36 +01:00
needsupdateexception.php Update license headers 2015-03-26 11:44:36 +01:00
notsquareexception.php Update license headers 2015-03-26 11:44:36 +01:00
ocs.php Update license headers 2015-03-26 11:44:36 +01:00
ocsclient.php Improve error messge text for app upgrade try (#15375) 2015-04-22 13:24:11 +02:00
preview.php Introducing the maximum size preview 2015-04-07 16:45:59 +02:00
previewmanager.php Split image provider in one sub-class per media type 2015-04-02 10:31:24 +02:00
repair.php Merge pull request #14665 from owncloud/fileid-increment 2015-03-26 19:36:18 +01:00
repairexception.php Update license headers 2015-03-26 11:44:36 +01:00
repairstep.php Update license headers 2015-03-26 11:44:36 +01:00
response.php Add version to deprecation notice 2015-04-20 10:30:16 +02:00
search.php Update license headers 2015-03-26 11:44:36 +01:00
server.php Fix return type of the getRootFolder() method 2015-04-28 09:36:29 +02:00
servernotavailableexception.php throw exception if setup is incomplete 2015-04-10 09:12:37 +02:00
serviceunavailableexception.php Update license headers 2015-03-26 11:44:36 +01:00
setup.php Add check for activated local memcache 2015-03-28 13:59:22 +01:00
subadmin.php Remove unused variables 2015-04-18 16:35:19 +02:00
systemconfig.php Update license headers 2015-03-26 11:44:36 +01:00
tagmanager.php Update license headers 2015-03-26 11:44:36 +01:00
tags.php Fix undefined variable $tagId 2015-05-04 16:19:26 +02:00
template.php Update license headers 2015-03-26 11:44:36 +01:00
templatelayout.php Use OC.Notification for update notifications 2015-05-03 17:26:03 +02:00
tempmanager.php Fix collision on temporary files + adjust permissions 2015-04-23 15:07:54 +02:00
updater.php Skip disable3rdParty Apps 2015-05-20 17:06:00 +02:00
urlgenerator.php Fix UrlGenerator::imagePath() for app paths 2015-04-03 23:42:18 +01:00
user.php Merge pull request #16499 from owncloud/fix-phpdoc-annotations 2015-05-21 13:54:01 +02:00
util.php Merge pull request #16075 from owncloud/skeleton-copy-delay 2015-05-20 13:52:08 +02:00