nextcloud/lib/private
Christoph Wurst 1c65d33e9f Do not match sharees on an empty email address
When asking for sharees we compare not only UID and displayname but also
the email address. And if that matches we return the sharee as an exact
match. This logic had a flaw as in that it also matched the empty string
to users with no email address.

This is most noticeable when you disable sharee enumeration and open the
ownership transfer dialog. It suggested other users of the instance
before. This has stopped now.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2020-09-29 07:31:46 +00:00
..
Accounts Update license headers for 19 2020-04-29 11:57:22 +02:00
Activity Update license headers for 19 2020-04-29 11:57:22 +02:00
App Increase timeout of the appstore requests 2020-07-02 23:36:24 +02:00
AppFramework Fix IPv6 remote addresses from X_FORWARDED_FOR headers before validating 2020-07-02 10:09:45 +00:00
Archive Update license headers for 19 2020-04-29 11:57:22 +02:00
Authentication Fix app password updating out of bounds 2020-09-03 20:03:47 +00:00
Avatar Update license headers for 19 2020-04-29 11:57:22 +02:00
BackgroundJob Update license headers for 19 2020-04-29 11:57:22 +02:00
Broadcast/Events Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Cache Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Calendar Update license headers for 19 2020-04-29 11:57:22 +02:00
Collaboration Do not match sharees on an empty email address 2020-09-29 07:31:46 +00:00
Command Update license headers for 19 2020-04-29 11:57:22 +02:00
Comments Update license headers for 19 2020-04-29 11:57:22 +02:00
Console Update license headers for 19 2020-04-29 11:57:22 +02:00
Contacts/ContactsMenu contactsmanager shall limit number of results early 2020-08-03 13:18:14 +00:00
Dashboard Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
DB Warn about adding NotNull columns with nullable default 2020-09-07 18:57:56 +00:00
Diagnostics Update license headers for 19 2020-04-29 11:57:22 +02:00
DirectEditing Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Encryption Update license headers for 19 2020-04-29 11:57:22 +02:00
EventDispatcher Log deprecated events as debug 2020-07-02 10:49:11 +02:00
Federation Update license headers for 19 2020-04-29 11:57:22 +02:00
Files Transfer shares of the transferred root node 2020-09-17 19:03:07 +02:00
FullTextSearch Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
GlobalScale Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Group Search also the email and displayname in user mangement for groups 2020-08-05 14:11:41 +00:00
Hooks Update the license headers for Nextcloud 19 2020-03-31 14:52:54 +02:00
Http parse_url returns null in case a parameter is not found 2020-07-29 16:13:32 +00:00
IntegrityCheck Update license headers for 19 2020-04-29 11:57:22 +02:00
L10N Fix languages empty array 2020-05-08 09:25:59 +00:00
legacy show better quota warning for group folders and external storage 2020-08-26 19:17:43 +00:00
Lock Fix releasing a shared lock multiple times 2020-07-06 12:11:46 +00:00
Lockdown Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Log Fix chmod on file descriptor 2020-08-12 01:26:10 +00:00
Mail Fix notification mail tests 2020-05-01 03:00:42 +02:00
Memcache Update license headers for 19 2020-04-29 11:57:22 +02:00
Migration Use exactly one empty line after the namespace declaration 2020-04-09 11:48:10 +02:00
Notification Use exactly one empty line after the namespace declaration 2020-04-09 11:48:10 +02:00
OCS Update license headers for 19 2020-04-29 11:57:22 +02:00
Preview Use class that actually has the destroy() method in preview generator 2020-08-05 20:41:25 +00:00
Remote Update license headers for 19 2020-04-29 11:57:22 +02:00
Repair Update license headers for 19 2020-04-29 11:57:22 +02:00
RichObjectStrings Use exactly one empty line after the namespace declaration 2020-04-09 11:48:10 +02:00
Route Update license headers for 19 2020-04-29 11:57:22 +02:00
Search Update license headers for 19 2020-04-29 11:57:22 +02:00
Security Use random_bytes 2020-05-11 12:23:02 +00:00
Session Silence duplicate session warnings 2020-08-14 07:24:53 +00:00
Settings Allow additional personal settings via normal registration 2020-09-09 11:25:40 +00:00
Setup Update license headers for 19 2020-04-29 11:57:22 +02:00
Share Update license headers for 19 2020-04-29 11:57:22 +02:00
Share20 makes LDAP's group updater dispatch type events 2020-09-10 15:18:47 +02:00
Support Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
SystemTag Update license headers for 19 2020-04-29 11:57:22 +02:00
Tagging Update license headers for 19 2020-04-29 11:57:22 +02:00
Template Use the correct root to determinate the webroot for the resource 2020-09-04 07:01:26 +00:00
Updater Update license headers for 19 2020-04-29 11:57:22 +02:00
User Update license headers for 19 2020-04-29 11:57:22 +02:00
AllConfig.php Define getSystemValueBool/Int/String function default parameter with correct type 2020-04-29 14:19:52 +02:00
AppConfig.php Update license headers for 19 2020-04-29 11:57:22 +02:00
CapabilitiesManager.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Color.php Update license headers for 19 2020-04-29 11:57:22 +02:00
Config.php Update license headers for 19 2020-04-29 11:57:22 +02:00
ContactsManager.php Update license headers for 19 2020-04-29 11:57:22 +02:00
DatabaseException.php Update license headers 2019-12-05 15:38:45 +01:00
DatabaseSetupException.php Update license headers 2019-12-05 15:38:45 +01:00
DateTimeFormatter.php Use elseif instead of else if 2020-04-10 10:35:09 +02:00
DateTimeZone.php Update license headers for 19 2020-04-29 11:57:22 +02:00
ForbiddenException.php Update license headers 2019-12-05 15:38:45 +01:00
HintException.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
InitialStateService.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Installer.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
LargeFileHelper.php Add visibility to all constants 2020-04-10 16:54:27 +02:00
Log.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
MemoryInfo.php Update license headers for 19 2020-04-29 11:57:22 +02:00
NaturalSort.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
NaturalSort_DefaultCollator.php Update license headers 2019-12-05 15:38:45 +01:00
NavigationManager.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
NeedsUpdateException.php Update license headers 2019-12-05 15:38:45 +01:00
NotSquareException.php Update license headers 2019-12-05 15:38:45 +01:00
PreviewManager.php Update license headers for 19 2020-04-29 11:57:22 +02:00
PreviewNotAvailableException.php Update license headers 2019-12-05 15:38:45 +01:00
RedisFactory.php Update license headers for 19 2020-04-29 11:57:22 +02:00
Repair.php Remove obsolete repair steps for logo and updater channel 2020-04-24 09:57:52 +02:00
RepairException.php Update license headers 2019-12-05 15:38:45 +01:00
Search.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Server.php Fix app password updating out of bounds 2020-09-03 20:03:47 +00:00
ServerContainer.php Use elseif instead of else if 2020-04-10 10:35:09 +02:00
ServerNotAvailableException.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
ServiceUnavailableException.php Update license headers 2019-12-05 15:38:45 +01:00
Setup.php Update hub bundle and add proxy rule to htaccess 2020-05-25 19:52:22 +00:00
Streamer.php Only disable zip64 if the size is known 2020-09-01 13:42:49 +00:00
SubAdmin.php Don't loop over all groups to check for subadmins 2020-04-27 08:37:53 +02:00
SystemConfig.php Use exactly one empty line after the namespace declaration 2020-04-09 11:48:10 +02:00
TagManager.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00
Tags.php Update license headers for 19 2020-04-29 11:57:22 +02:00
TemplateLayout.php Make sure that getConfig is still called for browsers that do not support CSPv3 2020-09-17 10:18:30 +02:00
TempManager.php Update license headers for 19 2020-04-29 11:57:22 +02:00
Updater.php Update license headers for 19 2020-04-29 11:57:22 +02:00
URLGenerator.php Format control structures, classes, methods and function 2020-04-10 14:19:56 +02:00