From cf732c4d274a09597b813582fc2878777da3c36d Mon Sep 17 00:00:00 2001
From: Roeland Jago Douma <roeland@famdouma.nl>
Date: Sat, 4 Jul 2015 07:27:56 +0200
Subject: [PATCH] Do not leak mounttype of a public share
---
apps/files_sharing/ajax/list.php | 3 +++
1 file changed, 3 insertions(+)
diff --git a/apps/files_sharing/ajax/list.php b/apps/files_sharing/ajax/list.php
index d09b61fd4a..9185e508e6 100644
--- a/apps/files_sharing/ajax/list.php
+++ b/apps/files_sharing/ajax/list.php
@@ -71,6 +71,9 @@ foreach ($files as $file) {
unset($entry['directory']);
// do not disclose share owner
unset($entry['shareOwner']);
+ // do not disclose if something is a remote shares
+ unset($entry['mountType']);
+ unset($entry['icon']);
$entry['permissions'] = \OCP\Constants::PERMISSION_READ;
$formattedFiles[] = $entry;
}
--
GitLab