Skip to content

Conversation

@LukasReschke
Copy link
Member

Backport of #1328 and #797

Some user agents are notorious and don't really properly follow HTTP
 specifications. For those, have an automated opt-out. Since the protection
for remote.php is applied in base.php as starting point we need to opt out
here.
OVH has implemented load balancing in a very questionable way where the reverse proxy actually internally adds some cookies which would trigger a security exception. To work around this, this change only checks for the session cookie.
@LukasReschke LukasReschke added the 3. to review Waiting for reviews label Sep 8, 2016
@LukasReschke LukasReschke added this to the Nextcloud 10.0.1 milestone Sep 8, 2016
@MorrisJobke
Copy link
Member

Tested and works 👍

@tflidd
Copy link
Contributor

tflidd commented Sep 8, 2016

Tested on NC 10.0 with OS X 10.9 👍

@rullzer rullzer merged commit b9100da into stable10 Sep 9, 2016
@rullzer rullzer deleted the osx-problems-stable10 branch September 9, 2016 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants