github.com/cs3org/reva/v2@v2.27.7/changelog/2.3.0_2022-05-02/avoid-user-enumeration.md

github.com/cs3org/reva/v2@v2.27.7/changelog/2.3.0_2022-05-02/avoid-user-enumeration.md (about)

     1  Change: avoid user enumeration
     2  
     3  sending PROPFIND requests to `../files/admin` did return a different response than sending the
     4  same request to `../files/notexists`. This allowed enumerating users.
     5  This response was changed to be the same always
     6  
     7  https://github.com/cs3org/reva/pull/2735