David Cook
751e72dfda
This change validates the paths in datalink.txt/idlink.txt, so that only images in the unpacked archive directory are allowed Test plan: 0. Apply the patch 1. koha-plack --reload kohadev 2. Create a datalink.txt file with the following: 42,selfie.jpg 3. Create a jpeg at selfie.jpg 4. ZIP the datalink.txt and selfie.jpg files 5. Upload to the "Upload patron images" tool (after enabling the "patronimages" system preference) 6. Note that the image uploads correctly Signed-off-by: Nick Clemens <nick@bywatersolutions.com> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> (cherry picked from commit 8fcb767fe2836c90ceacb5b5d8211524571eb8aa) Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de> |
||
|---|---|---|
| .. | ||
| csv-profiles | ||
| access_files.pl | ||
| additional-contents.pl | ||
| ajax-inventory.pl | ||
| automatic_item_modification_by_age.pl | ||
| batch_delete_records.pl | ||
| batch_extend_due_dates.pl | ||
| batch_record_modification.pl | ||
| batch_records_ajax.pl | ||
| batchMod.pl | ||
| cleanborrowers.pl | ||
| copy-holidays.pl | ||
| csv-profiles.pl | ||
| exceptionHolidays.pl | ||
| export.pl | ||
| holidays.pl | ||
| import_borrowers.pl | ||
| inventory.pl | ||
| letter.pl | ||
| manage-marc-import.pl | ||
| marc_modification_templates.pl | ||
| modborrowers.pl | ||
| newHolidays.pl | ||
| overduerules.pl | ||
| page.pl | ||
| picture-upload.pl | ||
| problem-reports.pl | ||
| quotes-upload.pl | ||
| quotes.pl | ||
| scheduler.pl | ||
| showdiffmarc.pl | ||
| stage-marc-import.pl | ||
| stockrotation.pl | ||
| tools-home.pl | ||
| upload-cover-image.pl | ||
| upload-file.pl | ||
| upload.pl | ||
| viewlog.pl | ||