Skip to content

[stable28] fix(ContactsStore): Sanitize user ID given to guest avatar route - #43422

Merged
susnux merged 1 commit into
stable28from
backport/43317/stable28
Feb 9, 2024
Merged

[stable28] fix(ContactsStore): Sanitize user ID given to guest avatar route#43422
susnux merged 1 commit into
stable28from
backport/43317/stable28

Conversation

@backportbot

Copy link
Copy Markdown

Backport of PR #43317

It is not allowed to use slashes within path parameters, so they would need to be encoded.
But URL encoded slashes are not suported by Apache, so instead replace slash with space.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
@backportbotbackportbotBot added bug 3. to review Waiting for reviews php Pull requests that update Php code labels Feb 7, 2024
@backportbotbackportbotBot added this to the Nextcloud 28.0.3 milestone Feb 7, 2024
@susnux
susnux requested a review from AltahrimFebruary 7, 2024 10:45
@susnux
susnux merged commit c4b164d into stable28Feb 9, 2024
@susnux
susnux deleted the backport/43317/stable28 branch February 9, 2024 01:17
@skjnldsvskjnldsv mentioned this pull request Feb 14, 2024
8 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewWaiting for reviewsbugphpPull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@icewind1991@susnux