limit filesystem depth for managed attachments to gard against infinit recursion

This commit is contained in:
Ralf Becker 2018-04-11 11:25:53 +02:00
parent bded1bf17e
commit 047e68ecd4

View File

@ -1543,6 +1543,7 @@ class CalDAV extends HTTP_WebDAV_Server
foreach(Vfs::find(Link::vfs_path($app, $id, '', true), array(
'type' => 'F',
'need_mime' => true,
'maxdepth' => 10, // set a limit to not run into an infinit recursion
), true) as $path => $stat)
{
// handle symlinks --> return target size and mime-type