Merge pull request #46813 from nextcloud/refactor/files_versions/secu…

…rity-attributes
nextcloud · Aug 14, 2024 · 1044b7f · 1044b7f
2 parents 8c08ac0 + 2c8f6a0
commit 1044b7f
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/apps/files_versions/lib/Controller/PreviewController.php b/apps/files_versions/lib/Controller/PreviewController.php
@@ -8,6 +8,8 @@
 use OCA\Files_Versions\Versions\IVersionManager;
 use OCP\AppFramework\Controller;
 use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\NoAdminRequired;
+use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\AppFramework\Http\FileDisplayResponse;
 use OCP\Files\IRootFolder;
@@ -47,9 +49,6 @@ public function __construct(
  }
 
  /**
- * @NoAdminRequired
- * @NoCSRFRequired
- *
  * Get the preview for a file version
  *
  * @param string $file Path of the file
@@ -62,6 +61,8 @@ public function __construct(
  * 400: Getting preview is not possible
  * 404: Preview not found
  */
+ #[NoAdminRequired]
+ #[NoCSRFRequired]
  public function getPreview(
  string $file = '',
  int $x = 44,