Friendica/friendica-github
1
0
Fork 0
mirror of https://github.com/friendica/friendica synced 2024-11-09 23:42:53 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix possible security issue

Browse source
This commit is contained in:
Philipp 2022-11-02 19:58:01 +01:00
parent 1c80969db9
commit 89fde911f9
No known key found for this signature in database
GPG key ID: 24A7501396EB5432
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/Module/Calendar/Export.php
View file

@ -58,6 +58,10 @@ class Export extends BaseModule
protected function rawContent(array $request = [])
{
if (!$this->session->getLocalUserId()) {
throw new HTTPException\UnauthorizedException($this->t('Permission denied.'));
}
$owner = User::getByNickname($this->parameters['nickname'], ['uid']);
if (empty($owner)) {
throw new HTTPException\NotFoundException($this->t('User not found.'));