Merge pull request #299 from immerda/preventUserEnumeration

honor user enumeration prevention of the share api
nextcloud · Jun 24, 2019 · 0b7ef01 · 0b7ef01
2 parents 7b87aae + 3f8610d
commit 0b7ef01
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/lib/Controller/MembersController.php b/lib/Controller/MembersController.php
@@ -27,6 +27,7 @@
 namespace OCA\Circles\Controller;
 
 use OCA\Circles\Model\Member;
+use OCA\Circles\Model\SearchResult;
 use OCA\Circles\Service\MiscService;
 use OCP\AppFramework\Http\DataResponse;
 
@@ -173,6 +174,16 @@ public function searchGlobal($search) {
 				);
 		}
 
+		if ($this->configService->getAppValue('shareapi_allow_share_dialog_user_enumeration') !== 'yes') {
+			$result = array_filter(
+				$result,
+				function($data, $k) use ($search) {
+					/** @var SearchResult $data */
+					return $data->getIdent() === $search;
+				}, ARRAY_FILTER_USE_BOTH
+			);
+		}
+
 		return $this->success(['search' => $search, 'result' => $result]);
 	}