owncloud / owncloud/ocis

Trying to create `..` resource with `/webdav` root (old dav path) without `remote.php` returns html

Open
#10,339 0 comments 0 reactions 0 assignees View on GitHub
Type:Bug
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Describe the bug
( :x: ) Try to create a resource using `..` using the old webdav root path without `remote.php`
```bash
curl -XPUT 'https://localhost:9200/webdav/..' -d'some content' -uadmin:admin -vk
curl -XPUT 'https://localhost:9200/webdav/../lorem.txt' -d'some content' -uadmin:admin -vk
```
```
< HTTP/1.1 200 OK
< Content-Type: text/html; charset=utf-8

...
```

( :heavy_check_mark: ) `new` and `spaces` dav paths handle it properly
```
curl -XPUT 'https://localhost:9200/dav/files/admin/..' -d'some content' -uadmin:admin -vk
curl -XPUT 'https://localhost:9200/dav/spaces/{space-id}/..' -d'some content' -uadmin:admin -vk
```
```xml
< HTTP/1.1 405 Method Not Allowed
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.