From 327094d5574ed9cf330edcf33529ef7745b7b5f0 Mon Sep 17 00:00:00 2001 From: Ilja Neumann Date: Mon, 27 Feb 2017 18:30:10 +0100 Subject: [PATCH] #7496 Don`t allow upload of files with extension .part --- lib/private/legacy/util.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/lib/private/legacy/util.php b/lib/private/legacy/util.php index 9516a67af4..d201283598 100644 --- a/lib/private/legacy/util.php +++ b/lib/private/legacy/util.php @@ -1388,6 +1388,12 @@ class OC_Util { if (\OC\Files\Filesystem::isIgnoredDir($trimmed)) { return false; } + + $path_parts = pathinfo($trimmed); + if ($path_parts['extension'] === 'part') { + return false; + } + foreach (str_split($trimmed) as $char) { if (strpos(\OCP\Constants::FILENAME_INVALID_CHARS, $char) !== false) { return false;