mirror of
https://github.com/nextcloud/server.git
synced 2026-06-09 00:32:29 -04:00
Use FILTER_UNSAFE_RAW instead of FILTER_SANITIZE_STRING
`FILTER_SANITIZE_STRING` will still encode everything else.
This commit is contained in:
parent
e50f13d46b
commit
f13216d275
1 changed files with 1 additions and 1 deletions
|
|
@ -512,7 +512,7 @@ abstract class Common implements \OC\Files\Storage\Storage {
|
|||
}
|
||||
}
|
||||
|
||||
$sanitizedFileName = filter_var($fileName, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_LOW);
|
||||
$sanitizedFileName = filter_var($fileName, FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_LOW);
|
||||
if($sanitizedFileName !== $fileName) {
|
||||
throw new InvalidCharacterInPathException();
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in a new issue