Merge pull request #46813 from nextcloud/refactor/files_versions/secu…

…rity-attributes
nextcloud · Aug 14, 2024 · 1044b7f · 1044b7f
2 parents 8c08ac0 + 2c8f6a0
commit 1044b7f
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/apps/files_versions/lib/Controller/PreviewController.php b/apps/files_versions/lib/Controller/PreviewController.php
@@ -8,6 +8,8 @@
 use OCA\Files_Versions\Versions\IVersionManager;
 use OCP\AppFramework\Controller;
 use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\NoAdminRequired;
+use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\AppFramework\Http\FileDisplayResponse;
 use OCP\Files\IRootFolder;
@@ -47,9 +49,6 @@ public function __construct(
 	}
 
 	/**
-	 * @NoAdminRequired
-	 * @NoCSRFRequired
-	 *
 	 * Get the preview for a file version
 	 *
 	 * @param string $file Path of the file
@@ -62,6 +61,8 @@ public function __construct(
 	 * 400: Getting preview is not possible
 	 * 404: Preview not found
 	 */
+	#[NoAdminRequired]
+	#[NoCSRFRequired]
 	public function getPreview(
 		string $file = '',
 		int $x = 44,