Renaming resource to excluded directory name is allowed in spaces webdav
- Dominant language
- Go
- Stars
- 2.1k
- Forks
- 274
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 103
Description
## Describe the bug
Renaming a file/folder to the excluded directory name like **` /.github `** on spaces webdav is not forbidden
## Steps to reproduce
Steps to reproduce the behavior:
1. create user `uu1`
2. upload file `file.txt` with content `12345`
3. rename the file `file.txt` to `/.github`
```
curl -X MOVE -uadmin:admin -k https://localhost:9200/remote.php/dav/spaces/{spaceid}/file.txt -H "Destination: https://localhost:9200/remote.php/dav/spaces/{spaceid}/.github" -v
```
## Expected behavior
http response 403 Forbidden response
## Actual behavior
a file with the name `/remote.php/dav/spaces/{spaceid}/.github ` is listed
## Setup
Please describe how you started the server and provide a list of relevant environment variables.
```console
OCIS_VERSION= latest
BRANCH= master
```
Contributor guide
Assessment
This issue has not been assessed yet.