Merge pull request #5358 from nextcloud/fix/sharing/long-addresses

fix(sharing): skip long email addresses
nextcloud · Jul 17, 2023 · afb60be · afb60be
2 parents 7550785 + 7899440
commit afb60be
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/Controller/EmailController.php b/lib/Controller/EmailController.php
@@ -4,6 +4,7 @@
 /**
  * @author Thomas Citharel
  * @author Georg Ehrke
+ * @author Richard Steinmetz
  *
  * @copyright 2016 Thomas Citharel <tcit@tcit.fr>
  * @copyright 2019 Georg Ehrke <oc.list@georgehrke.com>
@@ -104,6 +105,12 @@ public function __construct(string $appName,
 	public function sendEmailPublicLink(string $recipient,
 		string $token,
 		string $calendarName):JSONResponse {
+		if (strlen($recipient) > 512) {
+			return new JSONResponse([
+				'message' => $this->l10n->t('Provided email-address is too long'),
+			], Http::STATUS_BAD_REQUEST);
+		}
+
 		$user = $this->userSession->getUser();
 		if (!$user) {
 			return new JSONResponse([