From 6c81c65eea4d77ab92d684894b2b48fc36528267 Mon Sep 17 00:00:00 2001
From: Joas Schilling <coding@schilljs.com>
Date: Thu, 1 Sep 2016 12:24:14 +0200
Subject: [PATCH] Also prevent null byte character
---
apps/files/js/filelist.js | 3 ++-
apps/files/tests/js/filelistSpec.js | 1 +
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/apps/files/js/filelist.js b/apps/files/js/filelist.js
index 52486df91c9..cfaeca1a06b 100644
--- a/apps/files/js/filelist.js
+++ b/apps/files/js/filelist.js
@@ -1419,7 +1419,8 @@
}
}
- return path.toLowerCase().indexOf(decodeURI('%0a')) === -1;
+ return path.toLowerCase().indexOf(decodeURI('%0a')) === -1 &&
+ path.toLowerCase().indexOf(decodeURI('%00')) === -1;
},
/**
diff --git a/apps/files/tests/js/filelistSpec.js b/apps/files/tests/js/filelistSpec.js
index 9180b032301..304f8438a59 100644
--- a/apps/files/tests/js/filelistSpec.js
+++ b/apps/files/tests/js/filelistSpec.js
@@ -1402,6 +1402,7 @@ describe('OCA.Files.FileList tests', function() {
'/abc/../',
'/../abc/',
'/foo%0Abar/',
+ '/foo%00bar/',
'/another\\subdir/../foo\\../bar\\..\\file/..\\folder/../'
], function(path) {
fileList.changeDirectory(decodeURI(path));
--
GitLab