From c720b5a0bfb856e031b2237dc6f5edb1479a8a65 Mon Sep 17 00:00:00 2001
From: Remi Collet <fedora@famillecollet.com>
Date: Sat, 5 Oct 2013 18:30:50 +0200
Subject: SabreDAV 1.8.7

---
 sabreDav_BrowserPluginFix.patch | 23 -----------------------
 1 file changed, 23 deletions(-)
 delete mode 100644 sabreDav_BrowserPluginFix.patch

(limited to 'sabreDav_BrowserPluginFix.patch')

diff --git a/sabreDav_BrowserPluginFix.patch b/sabreDav_BrowserPluginFix.patch
deleted file mode 100644
index 449283f..0000000
--- a/sabreDav_BrowserPluginFix.patch
+++ /dev/null
@@ -1,23 +0,0 @@
---- Sabre_DAV-1.6.5/Sabre/DAV/Browser/Plugin.php	2012-10-04 08:02:37.000000000 -0400
-+++ SabreDAV/lib/Sabre/DAV/Browser/Plugin.php	2013-04-11 14:29:08.000000000 -0400
-@@ -439,14 +439,14 @@
-      */
-     protected function getLocalAssetPath($assetName) {
- 
-+        $assetDir = __DIR__ . '/assets/';
-+        $path = $assetDir . $assetName;
-+
-         // Making sure people aren't trying to escape from the base path.
--        $assetSplit = explode('/', $assetName);
--        if (in_array('..',$assetSplit)) {
--            throw new Sabre_DAV_Exception('Incorrect asset path');
-+        if (strpos(realpath($path), realpath($assetDir)) === 0) {
-+            return $path;
-         }
--        $path = __DIR__ . '/assets/' . $assetName;
--        return $path;
--
-+        throw new Sabre_DAV_Exception_Forbidden('Path does not exist, or escaping from the base path was detected');
-     }
- 
-     /**
-- 
cgit