Also prevent null byte character

This commit is contained in:
Joas Schilling 2016-09-01 12:24:14 +02:00
parent 778ae8abd5
commit 5dd211cc88
No known key found for this signature in database
GPG Key ID: E166FD8976B3BAC8
2 changed files with 3 additions and 1 deletions

View File

@ -1339,7 +1339,8 @@
}
}
return path.toLowerCase().indexOf(decodeURI('%0a')) === -1;
return path.toLowerCase().indexOf(decodeURI('%0a')) === -1 &&
path.toLowerCase().indexOf(decodeURI('%00')) === -1;
},
/**

View File

@ -1334,6 +1334,7 @@ describe('OCA.Files.FileList tests', function() {
'/abc/../',
'/../abc/',
'/foo%0Abar/',
'/foo%00bar/',
'/another\\subdir/../foo\\../bar\\..\\file/..\\folder/../'
], function(path) {
fileList.changeDirectory(decodeURI(path));