Merge pull request #39996 from nextcloud/bugfix/noid/fix-header-regre…

…ssion fix(middleware): Fix header injection for bruteforce middleware
nextcloud · Aug 22, 2023 · 613cd16 · 613cd16
2 parents e42d82f + 381c350
commit 613cd16
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/lib/private/AppFramework/Middleware/Security/BruteForceMiddleware.php b/lib/private/AppFramework/Middleware/Security/BruteForceMiddleware.php
@@ -130,11 +130,7 @@ public function afterController($controller, $methodName, Response $response) {
 		}
 
 		if ($this->delaySlept) {
-			$headers = $response->getHeaders();
-			if (!isset($headers['X-Nextcloud-Bruteforce-Throttled'])) {
-				$headers['X-Nextcloud-Bruteforce-Throttled'] = $this->delaySlept . 'ms';
-				$response->setHeaders($headers);
-			}
+			$response->addHeader('X-Nextcloud-Bruteforce-Throttled', $this->delaySlept . 'ms');
 		}
 
 		return parent::afterController($controller, $methodName, $response);