Conversation
8f0dfcc to
4263b72
Compare
4263b72 to
86f71c2
Compare
86f71c2 to
8659a4c
Compare
ad15a91 to
ef4dc7d
Compare
This was possible on Nextcloud 30 and previous due to a "bug": The `download` permission was simply not rejected for public shares, just a `hide` flag was set on the public share. Now the permissions are correctly set, so loading a preview is not possible. The work-around is to allow previews when the correct header is set. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
ef4dc7d to
83a5ae1
Compare
|
Still valid @susnux ? |
|
Thanks for this, and sorry it sat so long. Both things it was chained on landed back in 2024 (#2482, and nextcloud/server#47831), and then nobody picked it back up. Closing it here because this repository is frozen: the viewer now lives in Your fix is in the library as nextcloud-libraries/nextcloud-viewer#51, with a
The One thing your PR made me notice: the existing fallback never revoked the object URLs it created, so paging through a folder of E2EE files held all of them until the viewer closed. That is fixed alongside. |
This was possible on Nextcloud 30 and previous due to a "bug": The
downloadpermission was simply not rejected for public shares, just ahideflag was set on the public share.Now the permissions are correctly set, so loading a preview is not possible. The work-around is to allow previews when the correct header is set.