Comments (7)
You have to manually configure the WWW_URL
constant inside the config.local.php
, as KaraDAV has no way of detecting the server address this way.
For example for testing I use:
const WWW_URL = 'http://192.168.43.171:8080/';
from karadav.
Yeah but would it not be better to have auto detection on the client side in case of a proxy or port mapping like docker.
from karadav.
There's auto-detection on the server side currently, the client cannot be trusted or it might open to flaws like open redirects.
I added instructions in INSTALL.md on how to configure WWW_URL accordingly.
If you have better detection code, then you're welcome for a PR, thank you :)
from karadav.
Because i dont see any client to server comunication for the path that is needed you cloud just use window.location.origin
on the client which has no open redirect vuln
from karadav.
The redirect happens on the server side, so there is no safe way to get the URL from the client in a trusted way.
from karadav.
So why not just use a client side javascript and sanatize it before display.
from karadav.
There is no way to do that safely.
from karadav.
Related Issues (20)
- CORS issues with reverse-proxy HOT 2
- Enable fail2ban by logging failed requests HOT 2
- Installation HOT 1
- the last nexcloud cliend from f-droid crashes HOT 6
- Karadav: Option to use shared directories between users HOT 1
- docker-compose.yml HOT 3
- After update to 0.4.0 no access to web file manager, only "Invalid URL" HOT 16
- Blank page on dietpi bookworm. HOT 3
- Ah right sorry, was probably the wrong link. But there is definitly something that prevents the Android app to recognize my Karadav server, while normal WebDAV used to work fine. HOT 6
- Empty "var" folder in each user directory HOT 2
- Nextcloud client not work HOT 1
- Server replied "413 Request Entity Too Large" to PUT with Nextcloud apps on upload HOT 3
- is it possible to add X-Accel-Redirect support HOT 1
- there will be a dir name by initial account (here are "demo") left to clean if change initial usename to another HOT 1
- owncloud/nextcloud clients doesnt work if installed in sub-directory HOT 6
- 401 Error | WebDAV HOT 2
- Missing SQLite3.php in lib folder HOT 4
- Mirrored folder structure on SSD HOT 2
- Problem with latest version and Docker: symlink to php binary missing HOT 1
- Files larger than 10mb fail to upload with Nextcloud app (403 error) HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from karadav.