nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-31 18:46:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Restrict the OPTIONS response on the root.

Browse Source
This commit is contained in:
Andrew McMillan 2007-11-04 13:48:56 +13:00
parent ee43bf9b9b
commit bdc9c1a875
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
inc/caldav-OPTIONS.php
View File

@ -11,7 +11,7 @@
dbg_error_log("OPTIONS", "method handler");
if ( ! $request->AllowedTo('read') ) {
$request->DoResponse( 403, translate("You may not access that calendar") );
$request->DoResponse( 403, translate("You may not access that collection") );
}
$exists = false;
@ -55,6 +55,10 @@ if ( isset($c->override_allowed_methods) )
$allowed = $c->override_allowed_methods;
else {
$allowed = "OPTIONS, GET, HEAD, PUT, DELETE, PROPFIND, MKCOL, MKCALENDAR, LOCK, UNLOCK, REPORT, PROPPATCH";
if ( $request->path == '/' ) {
$exists = true;
$allowed = "OPTIONS, GET, HEAD, PROPFIND, REPORT";
}
}
header( "Allow: $allowed");