From 1cf2c5cd8e9a39caafc0de3f559e71eaf9f2b7c5 Mon Sep 17 00:00:00 2001
From: Karel Picman <karel.picman@kontron.com>
Date: Thu, 1 Feb 2018 11:02:11 +0100
Subject: [PATCH] #716 dav4rack -> planio/dav4rack

---
 lib/redmine_dmsf/webdav/dmsf_resource.rb | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/lib/redmine_dmsf/webdav/dmsf_resource.rb b/lib/redmine_dmsf/webdav/dmsf_resource.rb
index e42411ba..34607c89 100644
--- a/lib/redmine_dmsf/webdav/dmsf_resource.rb
+++ b/lib/redmine_dmsf/webdav/dmsf_resource.rb
@@ -442,8 +442,9 @@ module RedmineDmsf
                 e.add_failure @path, Conflict
                 raise e
               end
-              http_if = http_if.slice(1, http_if.length - 2)
-              l = DmsfLock.find(http_if)
+              if http_if =~ /([a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89aAbB][a-f0-9]{3}-[a-f0-9]{12})/
+                l = DmsfLock.find($1)
+              end
               unless l
                 e = DAV4Rack::LockFailure.new
                 e.add_failure @path, Conflict
@@ -478,7 +479,11 @@ module RedmineDmsf
         if (token.nil? || token.empty? || token == "<(null)>" || User.current.anonymous?)
           BadRequest
         else
-          token = token.slice(1, token.length - 2)
+          if token =~ /([a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89aAbB][a-f0-9]{3}-[a-f0-9]{12})/
+            token = $1
+          else
+            return BadRequest
+          end
           begin
             entity = file ? file : folder
             l = DmsfLock.find(token)