Lukas Reschke 2da43e3751 Do not allow directory traversal using "../" ... We should not allow directory traversals using "../" here. To test access the following URL once with and then without this patch: http://localhost/server/index.php/apps/files/?dir=../../This+Should+Not+Be+Here		2016-07-01 13:33:00 +02:00
..
ajax	smaller files drop fixes	2016-06-13 00:15:09 +02:00
appinfo	Inject the Mount Manager	2016-04-04 09:10:43 +02:00
command	Introduce isReadyForUser and verify in file transfer ownership - fixes #23786	2016-04-20 20:25:22 +02:00
controller	Add Same Site Cookie protection	2016-06-10 17:15:43 +02:00
css	fix padding of 3-dot button on mobile	2016-06-15 15:54:30 +02:00
img	compress icons in navigation, move to monochrome again	2015-08-28 13:30:20 +02:00
js	Do not allow directory traversal using "../"	2016-07-01 13:33:00 +02:00
l10n	Yo-ho-oh - Murder all band 'o pirates - backport of #24550	2016-05-11 11:22:08 +02:00
lib	Run cleanup of expired DB file locks to background job	2016-03-04 20:13:05 +01:00
service	Display share status info in favorite list	2016-03-18 11:36:43 +01:00
templates	Make more action icons themable + style fixes	2016-02-25 23:01:07 +01:00
tests	Do not allow directory traversal using "../"	2016-07-01 13:33:00 +02:00
admin.php	Happy new year!	2016-01-12 15:02:18 +01:00
download.php	Happy new year!	2016-01-12 15:02:18 +01:00
list.php	Happy new year!	2016-01-12 15:02:18 +01:00
simplelist.php	Happy new year!	2016-01-12 15:02:18 +01:00