From 979a3ff8300487a96f07f18f454c5437dbc62f1b Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Thu, 17 Mar 2016 10:58:34 +0100 Subject: [PATCH] Escape App ID While all callers do this as well this prevents a misuse of the API by mistake. --- lib/private/route/router.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/private/route/router.php b/lib/private/route/router.php index 13f7a7a1cf..03bee3d203 100644 --- a/lib/private/route/router.php +++ b/lib/private/route/router.php @@ -110,6 +110,10 @@ class Router implements IRouter { * @param null|string $app */ public function loadRoutes($app = null) { + if(is_string($app)) { + $app = \OC_App::cleanAppId($app); + } + $requestedApp = $app; if ($this->loaded) { return;