bughas-updateshelp wantedneeds verification
Repository-Metriken
- Stars
- (2.920 Sterne)
- PR-Merge-Metriken
- (PR-Metriken ausstehend)
Beschreibung
The default configuration of NCP with modsecurity seems to have an issue when handling vcard files.
Setup: current docker instance of NCP with modsecurity enabled, latest updates
Steps to reproduce:
- create new contact
- save contact (successful)
- change contact data
- request error 500 on saving the contact
- data is lost after site refresh
Steps 3-5 are successfull with disabled modsecurity.
Solution:
- create exception for addressbooksync
The corresponding logfile/line:
[Sat Jan 18 17:39:21.463016 2020] [:error] [pid 23201:tid 1817326624] [client xxxxxx] [client xxxxxxx] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "xxxxxxxx"] [uri "/remote.php/dav/addressbooks/users/xxxxxx/xxxxxx/xxxxxx-2DA4-4988-8FC6-xxxxxxxxxx.vcf"] [unique_id "XiNCyZLwCYQ4v2CWduyWOQAAShg"]