Merge pull request #1054 from nextcloud/backport/1051/stable23

[stable23] confirmKey must be uuid

Author: ArtificialOwl

lib/Service/RemoteStreamService.php

@@ -133,7 +133,7 @@ public function getAppSignatory(bool $generate = true, string $confirmKey = ''):
 		$this->fillSimpleSignatory($app, $generate);
 		$app->setUidFromKey();
 
-		if ($confirmKey !== '') {
+		if ($this->isUuid($confirmKey)) {
 			$app->setAuthSigned($this->signString($confirmKey, $app));
 		}
 

lib/Tools/Traits/TStringTools.php

@@ -85,6 +85,19 @@ protected function uuid(int $length = 0): string {
 	}
 
 
+	/**
+	 * @param string $uuid
+	 *
+	 * @return bool
+	 */
+	protected function isUuid(string $uuid): bool {
+		if ($uuid === '') {
+			return false;
+		}
+
+		return (preg_match('/^[0-9A-F]{8}-[0-9A-F]{4}-4[0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/i', $uuid) === 1);
+	}
+
 	/**
 	 * @param string $line
 	 * @param int $length