Merge pull request #46812 from nextcloud/refactor/files_trashbin/secu…

…rity-attributes
nextcloud · Aug 14, 2024 · 8c08ac0 · 8c08ac0
2 parents 4920f90 + 220c6a2
commit 8c08ac0
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/apps/files_trashbin/lib/Controller/PreviewController.php b/apps/files_trashbin/lib/Controller/PreviewController.php
@@ -11,6 +11,8 @@
 use OCA\Files_Trashbin\Trash\ITrashManager;
 use OCP\AppFramework\Controller;
 use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\NoAdminRequired;
+use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\AppFramework\Utility\ITimeFactory;
 use OCP\Files\Folder;
@@ -61,9 +63,6 @@ public function __construct(
 	}
 
 	/**
-	 * @NoAdminRequired
-	 * @NoCSRFRequired
-	 *
 	 * Get the preview for a file
 	 *
 	 * @param int $fileId ID of the file
@@ -77,6 +76,8 @@ public function __construct(
 	 * 400: Getting preview is not possible
 	 * 404: Preview not found
 	 */
+	#[NoAdminRequired]
+	#[NoCSRFRequired]
 	public function getPreview(
 		int $fileId = -1,
 		int $x = 32,