Allow to hide "hidden files" on public shares
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
This is a feature request:
Allow users to hide dot files on public shares, this could either be a per share config or a view option on the public share itself.
Original report:
Description
Hidden files visibility can be configured through the gear icon, at user Files App. On public shared links, hidden files are always visible.
Few months ago I've had this issue also in Internal Links/User interface, in Grid Mode, but updating my Nextcloud system solved the issue.
Steps to reproduce
- Make two copies of the same file in the same folder.
- Rename one of them to start with a dot (Ex: file.txt > .file.txt)
- File will be hidden (if users settings are configured accordingly)
- Create a public link share.
- Open public link in any browser.
- Hidden file that you just created is visible through the public link.
Expected behavior
Hidden files should be hidden, specially in public links. It was working before in older versions of Nextcloud, then suddenly hidden files became visible in grid mode and public links, after an upgrade to 25, now after upgrading all the way to latest stable 27.0.0, hidden files are in fact hidden when user is logged in, list or grid mode, but hidden files are still visible in public links.
Installation method
Community Docker image
Nextcloud Server version
27
Operating system
Debian/Ubuntu
PHP engine version
PHP 8.2
Web server
Nginx
Database engine version
MariaDB
Is this bug present after an update or on a fresh install?
Upgraded to a MAJOR version (ex. 22 to 23)
Are you using the Nextcloud Server Encryption module?
Encryption is Disabled
What user-backends are you using?
- Default user-backend (database)
- LDAP/ Active Directory
- SSO - SAML
- Other
Configuration report
{
"system": {
"memcache.local": "\\OC\\Memcache\\APCu",
"datadirectory": "***REMOVED SENSITIVE VALUE***",
"instanceid": "***REMOVED SENSITIVE VALUE***",
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"secret": "***REMOVED SENSITIVE VALUE***",
"filelocking.enabled": true,
"memcache.locking": "\\OC\\Memcache\\Redis",
"memcache.distributed": "\\OC\\Memcache\\Redis",
"redis": {
"host": "***REMOVED SENSITIVE VALUE***",
"port": 6379,
"timeout": 0,
"password": "***REMOVED SENSITIVE VALUE***"
},
"trusted_domains": [
"base.laboratoriocisco.org",
"192.168.10.195:444"
],
"trusted_proxies": "***REMOVED SENSITIVE VALUE***",
"dbtype": "mysql",
"version": "27.0.0.8",
"overwriteprotocol": "https",
"overwitehost": "base.laboratoriocisco.org",
"overwrite.cli.url": "https:\/\/base.laboratoriocisco.org\/",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbhost": "***REMOVED SENSITIVE VALUE***",
"dbport": "",
"dbtableprefix": "oc_",
"mysql.utf8mb4": true,
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"installed": true,
"mail_smtpmode": "smtp",
"mail_smtpsecure": "ssl",
"mail_sendmailmode": "smtp",
"mail_smtphost": "***REMOVED SENSITIVE VALUE***",
"mail_smtpport": "465",
"mail_from_address": "***REMOVED SENSITIVE VALUE***",
"mail_domain": "***REMOVED SENSITIVE VALUE***",
"mail_smtpauthtype": "LOGIN",
"mail_smtpauth": 1,
"mail_smtpname": "***REMOVED SENSITIVE VALUE***",
"mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
"default_phone_region": "BR",
"maintenance": false,
"theme": "",
"loglevel": 0,
"localstorage.allowsymlinks": true
}
}
List of activated Apps
Enabled:
- activity: 2.19.0
- admin_audit: 1.17.0
- bruteforcesettings: 2.7.0
- calendar: 4.4.2
- circles: 27.0.0
- cloud_federation_api: 1.10.0
- comments: 1.17.0
- contacts: 5.3.2
- contactsinteraction: 1.8.0
- dashboard: 7.7.0
- dav: 1.27.0
- federatedfilesharing: 1.17.0
- federation: 1.17.0
- files: 1.22.0
- files_external: 1.19.0
- files_pdfviewer: 2.8.0
- files_rightclick: 1.6.0
- files_sharing: 1.19.0
- files_trashbin: 1.17.0
- files_versions: 1.20.0
- files_zip: 1.4.0
- fileslibreofficeedit: 1.1.0
- firstrunwizard: 2.16.0
- logreader: 2.12.0
- lookup_server_connector: 1.15.0
- mail: 3.2.2
- nextcloud_announcements: 1.16.0
- notes: 4.8.0
- notifications: 2.15.0
- oauth2: 1.15.0
- password_policy: 1.17.0
- photos: 2.3.0
- privacy: 1.11.0
- provisioning_api: 1.17.0
- recommendations: 1.6.0
- related_resources: 1.2.0
- serverinfo: 1.17.0
- settings: 1.9.0
- sharebymail: 1.17.0
- spreed: 17.0.1
- support: 1.10.0
- survey_client: 1.15.0
- suspicious_login: 5.0.0
- systemtags: 1.17.0
- text: 3.8.0
- theming: 2.2.0
- twofactor_backupcodes: 1.16.0
- twofactor_totp: 9.0.0
- updatenotification: 1.17.0
- user_status: 1.7.0
- viewer: 2.1.0
- weather_status: 1.7.0
- workflowengine: 2.9.0
Disabled:
- encryption: 2.15.0
- files_accesscontrol: 1.17.0 (installed 1.17.0)
- files_downloadactivity: 1.16.0 (installed 1.16.0)
- ransomware_protection: 1.14.0 (installed 1.14.0)
- user_ldap: 1.17.0
Nextcloud Signing status
No errors have been found.
Nextcloud Logs
No response
Additional info
No response
How do feature requests work?
If you also want this feature, please leave a 👍 reaction on this post. We try to implement the most requested features.
Otherwise we also welcome contributions.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The report gives no source file or test entry point. Reproduce the listed public-share steps on Nextcloud 27 first, then trace the public-link file listing. Done means dot files are not visible through public links while ordinary files remain available, with the chosen per-share or view-option behavior defined.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 28/100