fix: patch-027 for nc32 upgrade (458a157d) · Commits · e / infra / ecloud / nextcloud

patches/027-displayname-user-leak-dav.patch

+3 −3

Original line number	Diff line number	Diff line
		@@ -5,9 +5,9 @@ Subject: [PATCH] Don't return results when searching by display name
		This patch(along with the right settings in the admin section "sharing") ensures that DAV searches are done only on the full email address
		of the user and not on the display name property

		--- ./apps/dav/lib/Connector/Sabre/Principal.php 2023-05-09 15:49:02.397783639 +0530
		+++ ./apps/dav/lib/Connector/Sabre/Principal-new.php 2023-05-09 15:49:56.555305986 +0530
		@@ -334,7 +334,7 @@
		--- ./apps/dav/lib/Connector/Sabre/Principal.php 2026-03-23 17:46:37.635006175 +0600
		+++ ./apps/dav/lib/Connector/Sabre/Principal-new.php 2026-03-24 11:11:25.956557583 +0600
		@@ -326,7 +326,7 @@
		if (!$allowEnumeration) {
		if ($allowEnumerationFullMatch) {
		$lowerSearch = strtolower($value);