From a6bf2bcbf4c9ad9289b0daca886de861b25f3c15 Mon Sep 17 00:00:00 2001 From: Alex Skalozub <pieceofsummer@gmail.com> Date: Sun, 29 Jun 2014 00:03:52 +0400 Subject: [PATCH] Should also disallow PROPFIND as well --- mongoose.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mongoose.c b/mongoose.c index 066e92432..fc755fdc1 100644 --- a/mongoose.c +++ b/mongoose.c @@ -4266,10 +4266,10 @@ static void open_local_endpoint(struct connection *conn, int skip_user) { close_local_endpoint(conn); #endif #ifndef MONGOOSE_NO_DAV - } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) { - handle_propfind(conn, path, &st, exists); } else if (must_hide_file(conn, path)) { send_http_error(conn, 404, NULL); + } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) { + handle_propfind(conn, path, &st, exists); } else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) { handle_mkcol(conn, path); } else if (!strcmp(conn->mg_conn.request_method, "DELETE")) { -- GitLab