From 4c2358cf0ad4848f03e240b1a779e0dafbfa54fa Mon Sep 17 00:00:00 2001 From: Ilja Neumann Date: Mon, 27 Feb 2017 18:30:10 +0100 Subject: [PATCH] #7496 Don`t allow upload of files with extension .part --- lib/private/legacy/util.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/lib/private/legacy/util.php b/lib/private/legacy/util.php index 2ecbfb99dfb7..cef9f6e88a94 100644 --- a/lib/private/legacy/util.php +++ b/lib/private/legacy/util.php @@ -1438,6 +1438,12 @@ public static function isValidFileName($file) { if (\OC\Files\Filesystem::isIgnoredDir($trimmed)) { return false; } + + $path_parts = pathinfo($trimmed); + if ($path_parts['extension'] === 'part') { + return false; + } + foreach (str_split($trimmed) as $char) { if (strpos(\OCP\Constants::FILENAME_INVALID_CHARS, $char) !== false) { return false;