Skip to content

[stable28] dav: fix wrong decoding of pluses in URLs - #43236

Merged
susnux merged 1 commit into
stable28from
backport/40594/stable28
Feb 3, 2024
Merged

[stable28] dav: fix wrong decoding of pluses in URLs#43236
susnux merged 1 commit into
stable28from
backport/40594/stable28

Conversation

@backportbot

Copy link
Copy Markdown

Backport of PR #40594

@backportbot
backportbotBot requested review from nfebe and skjnldsvJanuary 31, 2024 15:53
@skjnldsvskjnldsv added the 3. to review Waiting for reviews label Jan 31, 2024
@skjnldsv
skjnldsv requested review from a team, ArtificialOwl, come-nc and icewind1991 and removed request for a teamJanuary 31, 2024 16:00
@skjnldsvskjnldsv added this to the Nextcloud 28.0.3 milestone Jan 31, 2024
@skjnldsv
skjnldsvforce-pushed the backport/40594/stable28 branch from 944f4ab to 9d09337CompareFebruary 1, 2024 12:17
@skjnldsvskjnldsv added 4. to release Ready to be released and/or waiting for tests to finish and removed 3. to review Waiting for reviews labels Feb 1, 2024
PHP's urldecode function does not decode URLs according to RFC 3986, but
according to the HTML 4.01 query parameter
encoding. This results in pluses being wrongly decoded to spaces even
though they should not be decoded at all.
Use rawurldecode instead, which follows RFC 3986 properly.
This fixes an issue where files on DAV shares containing pluses were
incorrectly decoded to spaces.
Fixes: #15849
Signed-off-by: Lorenz Brun <lorenz@brun.one>
@susnux
susnuxforce-pushed the backport/40594/stable28 branch from 9d09337 to 745b697CompareFebruary 3, 2024 14:29
@susnux
susnux merged commit 44c9651 into stable28Feb 3, 2024
@susnux
susnux deleted the backport/40594/stable28 branch February 3, 2024 18:59
@skjnldsvskjnldsv mentioned this pull request Feb 14, 2024
8 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to releaseReady to be released and/or waiting for tests to finishbugfeature: dav

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@skjnldsv@come-nc@susnux@lorenz