Trying to create `..` resource with `/webdav` root (old dav path) without `remote.php` returns html
- Dominant language
- Go
- Stars
- 2.1k
- Forks
- 274
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 103
Description
## Describe the bug
( :x: ) Try to create a resource using `..` using the old webdav root path without `remote.php`
```bash
curl -XPUT 'https://localhost:9200/webdav/..' -d'some content' -uadmin:admin -vk
curl -XPUT 'https://localhost:9200/webdav/../lorem.txt' -d'some content' -uadmin:admin -vk
```
```
< HTTP/1.1 200 OK
< Content-Type: text/html; charset=utf-8
...
```
( :heavy_check_mark: ) `new` and `spaces` dav paths handle it properly
```
curl -XPUT 'https://localhost:9200/dav/files/admin/..' -d'some content' -uadmin:admin -vk
curl -XPUT 'https://localhost:9200/dav/spaces/{space-id}/..' -d'some content' -uadmin:admin -vk
```
```xml
< HTTP/1.1 405 Method Not Allowed
```
Contributor guide
Assessment
This issue has not been assessed yet.