Skip to content

M
mongoose
Commit ac229b66 authored by Sergey Lyubka's avatar Sergey Lyubka
Browse files
Options

Merge pull request #387 from Z-Wave-Me/master 

Disallow WebDAV MKCOL/PUT/DELETE requests to protected files
parents 0d9fe39d a6bf2bcb
Show whitespace changes
Inline Side-by-side
Showing with 2 additions and 0 deletions
mongoose.c
View file @ ac229b66
...@@ -4266,6 +4266,8 @@ static void open_local_endpoint(struct connection *conn, int skip_user) { ...@@ -4266,6 +4266,8 @@ static void open_local_endpoint(struct connection *conn, int skip_user) {
close_local_endpoint(conn); close_local_endpoint(conn);
#endif #endif
#ifndef MONGOOSE_NO_DAV #ifndef MONGOOSE_NO_DAV
} else if (must_hide_file(conn, path)) {
send_http_error(conn, 404, NULL);
} else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) { } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) {
handle_propfind(conn, path, &st, exists); handle_propfind(conn, path, &st, exists);
} else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) { } else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment