From efcd89cb18ea9e553d1d7a52f35cd61b499cf184 Mon Sep 17 00:00:00 2001
From: Vincent Petry <pvince81@owncloud.com>
Date: Mon, 26 Jan 2015 17:10:58 +0100
Subject: [PATCH] Do not disclose share owner in public file list
---
apps/files_sharing/ajax/list.php | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/apps/files_sharing/ajax/list.php b/apps/files_sharing/ajax/list.php
index 073c86365b..657c6f75da 100644
--- a/apps/files_sharing/ajax/list.php
+++ b/apps/files_sharing/ajax/list.php
@@ -64,7 +64,10 @@ $files = \OCA\Files\Helper::getFiles($dir, $sortAttribute, $sortDirection);
$formattedFiles = array();
foreach ($files as $file) {
$entry = \OCA\Files\Helper::formatFileInfo($file);
- unset($entry['directory']); // for now
+ // for now
+ unset($entry['directory']);
+ // do not disclose share owner
+ unset($entry['shareOwner']);
$entry['permissions'] = \OCP\Constants::PERMISSION_READ;
$formattedFiles[] = $entry;
}
--
GitLab