Merge pull request #22424 from owncloud/add-generic-csrf-protection-to-webdav
Require CSRF token for non WebDAV authenticated requests
Showing
- apps/dav/appinfo/v1/caldav.php 1 addition, 0 deletionsapps/dav/appinfo/v1/caldav.php
- apps/dav/appinfo/v1/carddav.php 1 addition, 0 deletionsapps/dav/appinfo/v1/carddav.php
- apps/dav/appinfo/v1/webdav.php 1 addition, 0 deletionsapps/dav/appinfo/v1/webdav.php
- apps/dav/lib/connector/sabre/auth.php 17 additions, 20 deletionsapps/dav/lib/connector/sabre/auth.php
- apps/dav/lib/dav/sharing/plugin.php 0 additions, 17 deletionsapps/dav/lib/dav/sharing/plugin.php
- apps/dav/lib/server.php 2 additions, 1 deletionapps/dav/lib/server.php
- apps/dav/tests/unit/connector/sabre/auth.php 62 additions, 45 deletionsapps/dav/tests/unit/connector/sabre/auth.php
- core/js/files/client.js 4 additions, 1 deletioncore/js/files/client.js
- core/js/oc-backbone-webdav.js 2 additions, 1 deletioncore/js/oc-backbone-webdav.js
Loading
Please register or sign in to comment