Skip to content

Conversation

@backportbot-nextcloud
Copy link

backport of #27610

We should throttle whenever an invalid request is sent to the public WebDAV endpoint.

Signed-off-by: Lukas Reschke <[email protected]>
@blizzz blizzz mentioned this pull request Jun 23, 2021
2 tasks
@LukasReschke
Copy link
Member

lukasreschke@Lukass-Air server % curl -u "RANDOM1:RANDOM2" -X PROPFIND http://localhost:8081/public.php/webdav
<?xml version="1.0" encoding="utf-8"?>
<d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns">
  <s:exception>Error</s:exception>
  <s:message>Call to undefined method OC\Security\Bruteforce\Throttler::sleepDelayOrThrowOnMax()</s:message>
</d:error>

@LukasReschke LukasReschke force-pushed the backport/27610/stable19 branch from ed71d37 to 6f23221 Compare June 23, 2021 10:27
LukasReschke and others added 2 commits June 23, 2021 15:06
Signed-off-by: Lukas Reschke <[email protected]>
Signed-off-by: Joas Schilling <[email protected]>
@LukasReschke
Copy link
Member

Errors seem unrelated.

@LukasReschke LukasReschke merged commit 159762d into stable19 Jun 23, 2021
@LukasReschke LukasReschke deleted the backport/27610/stable19 branch June 23, 2021 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants