diff --git a/src/app/contentManagement/controllers/OnlyOfficeController.php b/src/app/contentManagement/controllers/OnlyOfficeController.php index 4b2e81fae89fe5bb19413a71487e889331461885..125b2df8cf13e8511c778b344edbc1ef2e2ed4db 100644 --- a/src/app/contentManagement/controllers/OnlyOfficeController.php +++ b/src/app/contentManagement/controllers/OnlyOfficeController.php @@ -164,7 +164,7 @@ class OnlyOfficeController $uri = (string)$loadedXml->onlyoffice->server_uri; $port = (string)$loadedXml->onlyoffice->server_port; - if (strpos($checkUrl, "{$uri}:{$port}/cache/files/") !== 0) { + if (strpos($checkUrl, "{$uri}:{$port}/cache/files/") !== 0 && ($port != 80 || strpos($checkUrl, "{$uri}/cache/files/") !== 0)) { return $response->withStatus(400)->withJson(['errors' => 'Query params url is not allowed']); }