Skip to main content

Browse the archive

https://github.com/owncloud/core
05 April 2024, 02:57:31 UTC
Revision b2798afef5f7137484bb19e432014b7d8a088e22 authored by Lukas Reschke on 11 September 2014, 17:21:56 UTC, committed by Lukas Reschke on 23 September 2014, 10:05:34 UTC 
Do only follow HTTP and HTTPS redirects
 
We do not want to follow redirects to other protocols since they might allow an adversary to bypass network restrictions. (i.e. a redirect to ftp:// might be used to access files of a FTP server which might be in a secure zone and not be reachable from the net but from the ownCloud server)

Get final redirect manually using get_headers()

Migrate to HTTPHelper class and add unit tests

Conflicts:
	apps/files/ajax/newfile.php
	lib/private/files/storage/dav.php
	lib/private/server.php
	lib/private/util.php
	lib/public/iservercontainer.php
1 parent 5de19f3
History
Tip revision: b2798afef5f7137484bb19e432014b7d8a088e22 authored by Lukas Reschke on 11 September 2014, 17:21:56 UTC
Do only follow HTTP and HTTPS redirects
Tip revision: b2798af
File Mode Size
3rdparty @ 1cee061
apps
build
config
core
lib
ocs
search
settings
tests
themes
.gitignore -rw-r--r-- 1.2 KB
.gitmodules -rw-r--r-- 86 bytes
.htaccess -rwxr-xr-x 1.4 KB
AUTHORS -rw-r--r-- 586 bytes
CONTRIBUTING.md -rw-r--r-- 2.9 KB
COPYING-AGPL -rw-r--r-- 33.7 KB
COPYING-README -rw-r--r-- 568 bytes
README.md -rw-r--r-- 981 bytes
autotest.cmd -rw-r--r-- 6.4 KB
autotest.sh -rwxr-xr-x 5.7 KB
console.php -rw-r--r-- 916 bytes
cron.php -rw-r--r-- 3.4 KB
db_structure.xml -rw-r--r-- 23.5 KB
index.html -rw-r--r-- 179 bytes
index.php -rwxr-xr-x 1.1 KB
issue_template.md -rw-r--r-- 591 bytes
occ -rwxr-xr-x 279 bytes
public.php -rw-r--r-- 806 bytes
remote.php -rw-r--r-- 1.2 KB
robots.txt -rw-r--r-- 26 bytes
status.php -rw-r--r-- 1.4 KB
version.php -rw-r--r-- 449 bytes

README.md

back to top