nextcloud/nextcloudpi

Modsecurity prevents update of contacts

開放

#1,061 建立於 2020年1月18日

 (3 則留言) (0 個反應) (0 位負責人)Shell (320 個分叉)auto 404
bughas-updateshelp wantedneeds verification

倉庫指標

星標
 (2,920 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

The default configuration of NCP with modsecurity seems to have an issue when handling vcard files.

Setup: current docker instance of NCP with modsecurity enabled, latest updates

Steps to reproduce:

  1. create new contact
  2. save contact (successful)
  3. change contact data
  4. request error 500 on saving the contact
  5. data is lost after site refresh

Steps 3-5 are successfull with disabled modsecurity.

Solution:

  • create exception for addressbooksync

The corresponding logfile/line: [Sat Jan 18 17:39:21.463016 2020] [:error] [pid 23201:tid 1817326624] [client xxxxxx] [client xxxxxxx] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "xxxxxxxx"] [uri "/remote.php/dav/addressbooks/users/xxxxxx/xxxxxx/xxxxxx-2DA4-4988-8FC6-xxxxxxxxxx.vcf"] [unique_id "XiNCyZLwCYQ4v2CWduyWOQAAShg"]

貢獻者指南