nextcloud/passman
1
1
Fork 0
mirror of https://github.com/nextcloud/passman.git synced 2025-01-19 05:37:44 +08:00
Code Issues Projects Releases Packages Wiki Activity

Remove owner's shared key from the answer,

Browse source 
not needed and a possible data leak
This commit is contained in:
Marcos Zuriaga 2016-10-02 19:42:50 +02:00
parent 1ad2745292
commit dcebd9f849
No known key found for this signature in database
GPG key ID: 7D15585354D072FF
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
lib/Service/ShareService.php
View file

@ -99,7 +99,8 @@ class ShareService {
$return = [];
foreach ($entries as $entry){
$tmp = $entry->jsonSerialize();
$tmp['credential_data'] = $this->credential->getCredentialById($entry->getItemId());
$tmp['credential_data'] = $this->credential->getCredentialById($entry->getItemId())->jsonSerialize();
unset($tmp['credential_data']['shared_key']);
$return[] = $tmp;
}
return $return;