holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

limit filesystem depth for managed attachments to gard against infinit recursion

Browse Source
This commit is contained in:
Ralf Becker 2018-04-11 11:25:53 +02:00
parent c795f13f81
commit 188865566b
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
api/src/CalDAV.php
View File

@ -1543,6 +1543,7 @@ class CalDAV extends HTTP_WebDAV_Server
foreach(Vfs::find(Link::vfs_path($app, $id, '', true), array( foreach(Vfs::find(Link::vfs_path($app, $id, '', true), array(
'type' => 'F', 'type' => 'F',
'need_mime' => true, 'need_mime' => true,
'maxdepth' => 10, // set a limit to not run into an infinit recursion
), true) as $path => $stat) ), true) as $path => $stat)
{ {
// handle symlinks --> return target size and mime-type // handle symlinks --> return target size and mime-type