extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-11-25 09:23:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

limit filesystem depth for managed attachments to gard against infinit recursion

Browse Source
This commit is contained in:
Ralf Becker 2018-04-11 11:25:53 +02:00
parent bded1bf17e
commit 047e68ecd4
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
api/src/CalDAV.php
View File

@ -1543,6 +1543,7 @@ class CalDAV extends HTTP_WebDAV_Server
foreach(Vfs::find(Link::vfs_path($app, $id, '', true), array( foreach(Vfs::find(Link::vfs_path($app, $id, '', true), array(
'type' => 'F', 'type' => 'F',
'need_mime' => true, 'need_mime' => true,
'maxdepth' => 10, // set a limit to not run into an infinit recursion
), true) as $path => $stat) ), true) as $path => $stat)
{ {
// handle symlinks --> return target size and mime-type // handle symlinks --> return target size and mime-type