fix(share) : durcissement download (allowlist inline anti-XSS + nosniff) et masquage des erreurs SMB

This commit is contained in:
Matthieu
2026-06-03 17:42:36 +02:00
parent 74b6d298fb
commit 4ffa19e53f
2 changed files with 11 additions and 7 deletions
@@ -39,8 +39,8 @@ class ShareBrowseController extends AbstractController
$entries = $this->fileSource->dir($path);
} catch (ShareNotConfiguredException) {
return new JsonResponse(['error' => 'Share not configured.'], 409);
} catch (ShareConnectionException $e) {
return new JsonResponse(['error' => $e->getMessage()], 502);
} catch (ShareConnectionException) {
return new JsonResponse(['error' => 'Unable to reach the file share.'], 502);
}
return new JsonResponse([