upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-13 18:50:47 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

Merge pull request #55989 from nextcloud/bugfix/noid/harden-profiler-write

Browse source 
fix(profiler): Harden profiler writes
This commit is contained in:
Joas Schilling 2025-10-25 22:25:54 +02:00 committed by GitHub
commit bc1b17faa2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 14 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
lib/private/Profiler/FileProfilerStorage.php
View file

@ -48,15 +48,17 @@ class FileProfilerStorage {
[$csvToken, $csvMethod, $csvUrl, $csvTime, $csvParent, $csvStatusCode] = $values;
$csvTime = (int)$csvTime;
if ($url && !str_contains($csvUrl, $url) || $method && !str_contains($csvMethod, $method) || $statusCode && !str_contains($csvStatusCode, $statusCode)) {
if (($url && !str_contains($csvUrl, $url))
|| ($method && !str_contains($csvMethod, $method))
|| ($statusCode && !str_contains($csvStatusCode, $statusCode))) {
continue;
}
if (!empty($start) && $csvTime < $start) {
if ($start !== null && $csvTime < $start) {
continue;
}
if (!empty($end) && $csvTime > $end) {
if ($end !== null && $csvTime > $end) {
continue;
}
@ -154,20 +156,27 @@ class FileProfilerStorage {
return false;
}
fputcsv($file, [
fputcsv($file, array_map([$this, 'escapeFormulae'], [
$profile->getToken(),
$profile->getMethod(),
$profile->getUrl(),
$profile->getTime(),
$profile->getParentToken(),
$profile->getStatusCode(),
], escape: '');
]), escape: '');
fclose($file);
}
return true;
}
protected function escapeFormulae(?string $value): ?string {
if ($value !== null && preg_match('/^[=+\-@\t\r]/', $value)) {
return "'" . $value;
}
return $value;
}
/**
* Gets filename to store data, associated to the token.
*