You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Louis Chemineau 009d0c550c fix: Move CSRF check from base to PublicAuth for public.php ... This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip` in a GitHub comment. Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF. So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin. We also add a redirect to be helpful to the user. **Warning**: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view. Fix #52482 Signed-off-by: Louis Chemineau <louis@chmn.me>		5 months ago
..
direct.php	chore: Apply new rector configuration to apps folder	8 months ago
publicremote.php	fix: Move CSRF check from base to PublicAuth for public.php	5 months ago
remote.php	chore: Apply new rector configuration to apps folder	8 months ago