nextcloud/apps/files
Lukas Reschke 5b65591d84 Do not allow directory traversal using "../"
We should not allow directory traversals using "../" here.

To test access the following URL once with and then without this patch:

http://localhost/server/index.php/apps/files/?dir=../../This+Should+Not+Be+Here
2016-07-01 13:36:05 +02:00
..
ajax smaller files drop fixes 2016-06-11 15:15:37 +02:00
appinfo Update license headers 2016-05-26 19:57:24 +02:00
css Merge pull request #83 from nextcloud/file-drop-highlight 2016-06-15 17:36:16 +02:00
img compress icons in navigation, move to monochrome again 2015-08-28 13:30:20 +02:00
js Do not allow directory traversal using "../" 2016-07-01 13:36:05 +02:00
l10n [tx-robot] updated from transifex 2016-06-24 01:56:13 -04:00
lib Improve the UX for "not found" perma links 2016-06-09 14:00:00 +02:00
templates Improve the UX for "not found" perma links 2016-06-09 14:00:00 +02:00
tests Do not allow directory traversal using "../" 2016-07-01 13:36:05 +02:00
admin.php Add app:check-code for already compatible apps 2016-06-27 16:50:10 +02:00
download.php Add app:check-code for already compatible apps 2016-06-27 16:50:10 +02:00
list.php Add app:check-code for already compatible apps 2016-06-27 16:50:10 +02:00
simplelist.php Happy new year! 2016-01-12 15:02:18 +01:00