Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/tools
History
David Cook 5dc4b625cb
Bug 37488: Validate paths in datalink.txt/idlink.txt files 
This change validates the paths in datalink.txt/idlink.txt,
so that only images in the unpacked archive directory are allowed

Test plan:
0. Apply the patch
1. koha-plack --reload kohadev
2. Create a datalink.txt file with the following:
42,selfie.jpg
3. Create a jpeg at selfie.jpg
4. ZIP the datalink.txt and selfie.jpg files
5. Upload to the "Upload patron images" tool
(after enabling the "patronimages" system preference)
6. Note that the image uploads correctly

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
2024-08-13 11:05:30 -03:00
..
csv-profiles
access_files.pl Bug 33341: Address some perlcritic errors in 5.36 2023-03-28 14:50:33 +02:00
additional-contents.pl Bug 34368: Add CSRF token to Content Management pages 2023-07-28 09:12:39 -10:00
ajax-inventory.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
automatic_item_modification_by_age.pl Bug 32029: Automatic item modifications by age add biblio table 2024-03-19 19:50:15 +00:00
background-job-progress.pl Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
batch_delete_records.pl Bug 29697: Replace GetMarcBiblio occurrences with $biblio->metadata->record 2022-07-22 15:24:11 -03:00
batch_extend_due_dates.pl Bug 26978: Add item type option to batch extend due date tool 2023-10-12 13:58:06 -10:00
batch_record_modification.pl Bug 29771: Scalar context for split 2022-03-08 23:03:34 -10:00
batch_records_ajax.pl Bug 34913: Adjust "Manage staged MARC records" 2024-03-19 19:19:13 +00:00
batchMod.pl Bug 34257: (QA follow-up): tidy up code 2023-09-14 08:06:26 -10:00
cleanborrowers.pl Bug 30718: Use flatpickr's altInput 2022-08-19 08:26:31 -03:00
copy-holidays.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
csv-profiles.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
exceptionHolidays.pl Bug 33667: Allow copying holidays to all libraries when editing 2023-07-17 16:42:42 +01:00
export.pl Bug 25503: Add option to export items bundle contents in checkouts table 2023-05-10 15:26:20 -03:00
holidays.pl Bug 30718: Use flatpickr's altInput 2022-08-19 08:26:31 -03:00
import_borrowers.pl Bug 34621: implement Patron import option to 'Renew existing patrons' 'from the current membership expiry date' 2024-05-28 19:21:41 +00:00
inventory.pl Bug 35641: Reduce DB lookups when sending a list of barcodes to inventory 2024-02-02 17:51:54 +00:00
letter.pl Bug 32221: Borrowers.password should no longer be an option 2023-01-20 13:55:17 +00:00
manage-marc-import.pl Bug 33412: Fix comparison when checking for overlay framework 2023-05-09 10:58:04 -03:00
marc_modification_templates.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
modborrowers.pl Bug 35817: Fix hint on patron's category when batch update patron 2024-02-09 20:22:31 +00:00
newHolidays.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
overduerules.pl Bug 29844: Fix ->search occurrences 2022-02-09 15:36:23 -10:00
page.pl Bug 31385: (follow-up) Same change at intranet side 2022-08-19 11:43:56 -03:00
picture-upload.pl Bug 37488: Validate paths in datalink.txt/idlink.txt files 2024-08-13 11:05:30 -03:00
problem-reports.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
quotes-upload.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
quotes.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
scheduler.pl Bug 34349: Validate/escape inputs for task scheduler 2023-09-26 21:25:13 -10:00
showdiffmarc.pl Bug 31526: Follow-up for bug 29697 2022-09-16 10:25:48 -03:00
stage-marc-import.pl Bug 33755: Set profile_id and add missing import 2023-08-17 10:07:49 -10:00
stockrotation.pl Bug 30869: Add the ability to delete stock rotation rotas 2023-02-24 17:52:23 -03:00
tools-home.pl Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl 2023-05-16 11:47:15 +02:00
upload-cover-image.pl Bug 35291: (QA follow-up) Tidying script for QA test tools 2023-11-24 10:58:50 -10:00
upload-file.pl Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
upload.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
viewlog.pl Bug 32037: Check for existence of object before building link 2022-11-04 19:18:54 -03:00