David Cook 5dc4b625cb Bug 37488: Validate paths in datalink.txt/idlink.txt files ... This change validates the paths in datalink.txt/idlink.txt, so that only images in the unpacked archive directory are allowed Test plan: 0. Apply the patch 1. koha-plack --reload kohadev 2. Create a datalink.txt file with the following: 42,selfie.jpg 3. Create a jpeg at selfie.jpg 4. ZIP the datalink.txt and selfie.jpg files 5. Upload to the "Upload patron images" tool (after enabling the "patronimages" system preference) 6. Note that the image uploads correctly Signed-off-by: Nick Clemens <nick@bywatersolutions.com> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>		2024-08-13 11:05:30 -03:00
..
csv-profiles
access_files.pl	Bug 33341: Address some perlcritic errors in 5.36	2023-03-28 14:50:33 +02:00
additional-contents.pl	Bug 34368: Add CSRF token to Content Management pages	2023-07-28 09:12:39 -10:00
ajax-inventory.pl
automatic_item_modification_by_age.pl	Bug 32029: Automatic item modifications by age add biblio table	2024-03-19 19:50:15 +00:00
background-job-progress.pl
batch_delete_records.pl
batch_extend_due_dates.pl	Bug 26978: Add item type option to batch extend due date tool	2023-10-12 13:58:06 -10:00
batch_record_modification.pl
batch_records_ajax.pl	Bug 34913: Adjust "Manage staged MARC records"	2024-03-19 19:19:13 +00:00
batchMod.pl	Bug 34257: (QA follow-up): tidy up code	2023-09-14 08:06:26 -10:00
cleanborrowers.pl	Bug 30718: Use flatpickr's altInput	2022-08-19 08:26:31 -03:00
copy-holidays.pl
csv-profiles.pl
exceptionHolidays.pl	Bug 33667: Allow copying holidays to all libraries when editing	2023-07-17 16:42:42 +01:00
export.pl	Bug 25503: Add option to export items bundle contents in checkouts table	2023-05-10 15:26:20 -03:00
holidays.pl	Bug 30718: Use flatpickr's altInput	2022-08-19 08:26:31 -03:00
import_borrowers.pl	Bug 34621: implement Patron import option to 'Renew existing patrons' 'from the current membership expiry date'	2024-05-28 19:21:41 +00:00
inventory.pl	Bug 35641: Reduce DB lookups when sending a list of barcodes to inventory	2024-02-02 17:51:54 +00:00
letter.pl	Bug 32221: Borrowers.password should no longer be an option	2023-01-20 13:55:17 +00:00
manage-marc-import.pl	Bug 33412: Fix comparison when checking for overlay framework	2023-05-09 10:58:04 -03:00
marc_modification_templates.pl
modborrowers.pl	Bug 35817: Fix hint on patron's category when batch update patron	2024-02-09 20:22:31 +00:00
newHolidays.pl
overduerules.pl
page.pl	Bug 31385: (follow-up) Same change at intranet side	2022-08-19 11:43:56 -03:00
picture-upload.pl	Bug 37488: Validate paths in datalink.txt/idlink.txt files	2024-08-13 11:05:30 -03:00
problem-reports.pl
quotes-upload.pl
quotes.pl
scheduler.pl	Bug 34349: Validate/escape inputs for task scheduler	2023-09-26 21:25:13 -10:00
showdiffmarc.pl	Bug 31526: Follow-up for bug 29697	2022-09-16 10:25:48 -03:00
stage-marc-import.pl	Bug 33755: Set profile_id and add missing import	2023-08-17 10:07:49 -10:00
stockrotation.pl	Bug 30869: Add the ability to delete stock rotation rotas	2023-02-24 17:52:23 -03:00
tools-home.pl	Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl	2023-05-16 11:47:15 +02:00
upload-cover-image.pl	Bug 35291: (QA follow-up) Tidying script for QA test tools	2023-11-24 10:58:50 -10:00
upload-file.pl
upload.pl
viewlog.pl	Bug 32037: Check for existence of object before building link	2022-11-04 19:18:54 -03:00