From f13216d275fc59d448e91aab5e817bff5627d3d9 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 17 Mar 2015 21:56:16 +0100 Subject: [PATCH] Use `FILTER_UNSAFE_RAW` instead of `FILTER_SANITIZE_STRING` `FILTER_SANITIZE_STRING` will still encode everything else. --- lib/private/files/storage/common.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/private/files/storage/common.php b/lib/private/files/storage/common.php index 031a2f1cb7..5de243e177 100644 --- a/lib/private/files/storage/common.php +++ b/lib/private/files/storage/common.php @@ -512,7 +512,7 @@ abstract class Common implements \OC\Files\Storage\Storage { } } - $sanitizedFileName = filter_var($fileName, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_LOW); + $sanitizedFileName = filter_var($fileName, FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_LOW); if($sanitizedFileName !== $fileName) { throw new InvalidCharacterInPathException(); }