upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-23 07:08:34 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 54

Merge pull request #39996 from nextcloud/bugfix/noid/fix-header-regression

Browse source 
fix(middleware): Fix header injection for bruteforce middleware
This commit is contained in:
Joas Schilling 2023-08-22 16:32:10 +02:00 committed by GitHub
commit 613cd16583
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/private/AppFramework/Middleware/Security/BruteForceMiddleware.php
View file

@ -130,11 +130,7 @@ class BruteForceMiddleware extends Middleware {
}
if ($this->delaySlept) {
$headers = $response->getHeaders();
if (!isset($headers['X-Nextcloud-Bruteforce-Throttled'])) {
$headers['X-Nextcloud-Bruteforce-Throttled'] = $this->delaySlept . 'ms';
$response->setHeaders($headers);
}
$response->addHeader('X-Nextcloud-Bruteforce-Throttled', $this->delaySlept . 'ms');
}
return parent::afterController($controller, $methodName, $response);