mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #26525 from nextcloud/backport/26433/stable21 

[stable21] Limit size of properties to 2048 characters
This commit is contained in:
Joas Schilling 2021-04-12 22:41:34 +02:00 committed by GitHub
parent 87212ab097 ad91f39c46
commit 385420c64f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
lib/private/Accounts/AccountManager.php
View File

@ -144,6 +144,17 @@ class AccountManager implements IAccountManager {
} }
} }
// set a max length
foreach ($data as $propertyName => $propertyData) {
if (isset($data[$propertyName]) && isset($data[$propertyName]['value']) && strlen($data[$propertyName]['value']) > 2048) {
if ($throwOnData) {
throw new \InvalidArgumentException($propertyName);
} else {
$data[$propertyName]['value'] = '';
}
}
}
$allowedScopes = [ $allowedScopes = [
self::SCOPE_PRIVATE, self::SCOPE_PRIVATE,
self::SCOPE_LOCAL, self::SCOPE_LOCAL,