Add callCheck to testremote.php

Without CSRF check this file might be tricked into requesting itself which would result in an endless loop and thus potentially ending in a Denial of Service.
remotes/origin/create-share-target-reuse
Lukas Reschke 12 years ago
parent 92bc1b44d5
commit 4270188252
  1. 1
      apps/files_sharing/ajax/testremote.php

@ -6,6 +6,7 @@
* See the COPYING-README file.
*/
OCP\JSON::callCheck();
OCP\JSON::checkAppEnabled('files_sharing');
$remote = $_GET['remote'];

Loading…
Cancel
Save