upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-02 07:35:13 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

Check limit and offset parameters sent to controller

Browse source 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
This commit is contained in:
Côme Chilliet 2023-10-10 10:43:18 +02:00
parent afcebd1e92
commit e51d20479e
No known key found for this signature in database
GPG key ID: A3E2F658B28C760A
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apps/provisioning_api/lib/Controller/UsersController.php
View file

@ -246,6 +246,13 @@ class UsersController extends AUserData {
if ($currentUser === null) {
return new DataResponse(['users' => []]);
}
if ($limit !== null && $limit < 0) {
throw new InvalidArgumentException("Invalid limit value: $limit");
}
if ($offset < 0) {
throw new InvalidArgumentException("Invalid offset value: $offset");
}
$users = [];
// Admin? Or SubAdmin?