Skip to content

[stable33] fix(sessions): only use share node matching the session document - #9522

Open
backportbot[bot] wants to merge 1 commit into
stable33from
backport/9521/stable33
Open

backportbot[bot] wants to merge 1 commit into
stable33from
backport/9521/stable33

Conversation

@backportbot

@backportbot backportbot Bot commented Nov 3, 2026

Copy link
Copy Markdown

Backport of PR #9521

getFileForSession() returned the node of a single-file share without
checking it against the session's document, so the share token passed
with push, sync and save could belong to a different file. Require the
resolved file id to match the session document id.

Alaready fixed in stable35 and above, where getFileByIdFromShare() does
the same check, as part of #9062.

Signed-off-by: Jonas <jonas@freesources.org>
Assisted-by: ClaudeCode:claude-opus-5-5
@backportbot
backportbot Bot requested a review from benjaminfrueh November 3, 2026 20:12
@backportbot backportbot Bot added bug Something isn't working 3. to review feature: sharing labels Nov 3, 2026
@backportbot backportbot Bot added this to the Nextcloud 33.0.11 milestone Nov 3, 2026
@mejo- mejo- changed the title [stable33] [stable34] fix(sessions): only use share node matching the session document [stable33] fix(sessions): only use share node matching the session document Nov 3, 2026
@mejo-
mejo- enabled auto-merge November 3, 2026 20:13

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant